specification

North American Reliability Corp. (NERC) Critical Infrastructure Protection (CIP) standards is an IT Compliance Standards that released by the Federal
Energy Regulatory Commission (FERC). The NERC CIP is applicable to every utilities do with computers related to the operation of the grid, data collection and data dissemination throughout the enterprise. The NERC CIP has fines of up to $1 million per day for non compliance

Electronic Security (CIP-002, 003, 005, 007, 009)

Critical infrastructures are important to the national interest and people’s everyday life. US National Strategy for Homeland Security has identified 14 areas for critical infrastructure protection. Some of them are information and telecommunication, food energy, water, transportation, finance and banking, emergency services, chemical industry, public health, power grid etc. At the heart and soul of nearly every one of these critical infrastructures is the SCADA (supervisory, control, and data acquisition) system. Therefore, the security of the SCADA system has become a central issue. Unfortunately current security technologies deployed in the SCADA system have many flaws accompanied by endless break-in reports.

1. Management responsibility
ISO 9001 requires that the quality policy be defined, documented, understood, implemented, and maintained; that responsibilities and authorities for all personnel specifying, achieving, and monitoring quality be defined; and that in-house verification resources be defined, trained, and funded. A designated manager ensures that the quality program is implemented and maintained.

2. Quality system
ISO 9001 requires that a documented quality system, including procedures and instructions, be established.

3. Contract review
ISO 9001 requires that contracts be reviewed to determine whether the requirements are adequately de. ned, agree with the bid, and can be implemented.