08/26/2024 | Press release | Distributed by Public on 08/26/2024 15:59
FERC staff today offered recommendations to help users, owners and operators of the bulk electric system (BES) improve compliance with mandatory Critical Infrastructure Protection (CIP) reliability standards and overall cybersecurity postures.
The report, 2024 Lessons Learned from Commission-Led Reliability Audits, finds most of the registered entities' cybersecurity protection measures meet the mandatory requirements of the CIP reliability standards. The report identifies potential noncompliance and security risks that remain, and offers recommendations to mitigate those risks.
The annual report can help entities assess their risk and compliance with mandatory reliability standards while facilitating efforts to improve the broader security of the nation's electric grid. Staff from FERC's offices of Electric Reliability and Enforcement conducted the audits in collaboration with staff from the North American Electric Reliability Corporation and its regional entities.
The report discusses the following lessons: