NERC Critical Infrastructure Protection (CIP) Flashcards
6 cards from real NERC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 NERC Critical Infrastructure Protection (CIP) flashcards as text
Under NERC CIP-011, what must be protected as 'BES Cyber System Information'?
Answer: Information that, if disclosed, could be used to gain unauthorized access or pose a threat to BES Cyber Systems
CIP-011 requires protection of BES Cyber System Information that could be exploited to compromise BES reliability if disclosed.
CIP-014 was created in response to what type of threat to the bulk electric system?
Answer: Physical attacks on critical transmission substations
CIP-014 was developed following the 2013 Metcalf sniper attack and requires physical security assessments for critical transmission substations.
What is the minimum frequency for NERC CIP security awareness training?
Answer: Every 15 calendar months
CIP-004 requires security awareness training at least once every 15 calendar months for personnel with access to BES Cyber Systems.
Which entity is responsible for approving or modifying NERC CIP reliability standards before they take effect in the US?
Answer: FERC (Federal Energy Regulatory Commission)
FERC must approve NERC reliability standards, including CIP standards, before they become mandatory in the United States.
Under NERC CIP, a 'Protected Cyber Asset' (PCA) is:
Answer: Any device inside the ESP that is not a BES Cyber Asset but communicates with one
A Protected Cyber Asset is a device within the ESP that is not itself a BES Cyber Asset but communicates with a BES Cyber Asset.
NERC CIP-009 requires responsible entities to maintain which type of plans?
Answer: Recovery plans for BES Cyber Systems
CIP-009 establishes requirements for recovery plans to restore BES Cyber Systems following a cybersecurity incident.