GE P642, Technical Manual, Page: 402 / 592

3.1.1 CIP 002
CIP 002 concerns itself with the identification of:
● Critical assets, such as overhead lines and transformers
●
Critical cyber assets, such as IEDs that use routable protocols to communicate outside or inside the
Electronic Security Perimeter; or are accessible by dial-up
Power utility responsibilities: GE's contribution:
Create the list of the assets
We can help the power utilities to create this asset register automatically.
We can provide audits to list the Cyber assets
3.1.2 CIP 003
CIP 003 requires the implementation of a cyber-security policy, with associated documentation, which
demonstrates the management’s commitment and ability to secure its Critical Cyber Assets.
The standard also requires change control practices whereby all entity or vendor-related changes to hardware
and software components are documented and maintained.
Power utility responsibilities: GE's contribution:
To create a Cyber-security Policy
We can help the power utilities to have access control to its critical assets by
providing centralized Access control.
We can help the customer with its change control by providing a section in the
documentation where it describes changes affecting the hardware and software.
3.1.3 CIP 004
CIP 004 requires that personnel with authorized cyber access or authorized physical access to Critical Cyber
Assets, (including contractors and service vendors), have an appropriate level of training.
Power utility responsibilities: GE's contribution:
To provide appropriate training of its personnel We can provide cyber-security training
3.1.4 CIP 005
CIP 005 requires the establishment of an Electronic Security Perimeter (ESP), which provides:
●
The disabling of ports and services that are not required
● Permanent monitoring and access to logs (24x7x365)
●
Vulnerability Assessments (yearly at a minimum)
● Documentation of Network Changes
Power utility responsibilities: GE's contribution:
To monitor access to the ESP
To perform the vulnerability assessments
To document network changes
To disable all ports not used in the IED
To monitor and record all access to the IED
3.1.5 CIP 006
CIP 006 states that Physical Security controls, providing perimeter monitoring and logging along with robust
access controls, must be implemented and documented. All cyber assets used for Physical Security are considered
critical and should be treated as such:
Chapter 17 - Cyber-Security P64x
378 P64x-TM-EN-1.3