NERC CIP standards are among the most rigorous cybersecurity requirements in any industry. Non-compliance penalties can reach millions of dollars per day.
What NERC CIP Actually Requires
The NERC Critical Infrastructure Protection standards apply to bulk electric system assets, covering everything from physical security to electronic access controls to incident response and recovery planning.
The Software Architecture Implications
NERC CIP compliance is not something you bolt onto an existing system. The access control requirements, logging requirements, and change management requirements all have architectural implications that are much cheaper to design in from the start than to retrofit.