NERC Critical Infrastructure Protection (CIP) Flashcards
6 cards from real NERC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 NERC Critical Infrastructure Protection (CIP) flashcards as text
What is the Electronic Security Perimeter (ESP) as defined under NERC CIP?
Answer: The logical border surrounding a network to which BES Cyber Systems are connected
An ESP is the logical border surrounding a network to which BES Cyber Systems are connected and requiring controlled access.
Under CIP-007, how frequently must responsible entities review or update ports and services on BES Cyber Systems?
Answer: At least once every 15 calendar months
CIP-007 requires review of ports and services at least once every 15 calendar months to disable unnecessary ports.
Which impact level classification under NERC CIP carries the most stringent security requirements?
Answer: High impact
High impact BES Cyber Systems face the most stringent CIP requirements, including controls for all applicable CIP standards.
What does NERC CIP-005 govern?
Answer: Electronic security perimeters and remote access management
CIP-005 requires responsible entities to define and manage Electronic Security Perimeters and control remote access to BES Cyber Systems.
A 'Transient Cyber Asset' under CIP-010 is best described as:
Answer: A cyber asset that is temporarily connected to a BES Cyber System for 30 or fewer consecutive days
A Transient Cyber Asset is one connected temporarily (30 or fewer consecutive days per calendar year) to a BES Cyber System.
Which NERC CIP standard specifically addresses personnel and training requirements?
Answer: CIP-004
CIP-004 requires personnel risk assessment, security awareness, training, and access management for BES Cyber Systems.