Securing Critical Infrastructures Through Security Information Management

Date Added: May 2009
Format: PDF

Several of the critical infrastructure sectors have issued standards or guidelines for configuring and managing the security of Industrial Automation and Control Systems. These include the energy sector, which has issued the Critical Infrastructure Protection (CIP) standards through the North American Electric Corporation (NERC). These standards are referred to as NERC-CIP and provide auditable standards and practices that owner-operators are to have in place for protection of power generation and distribution systems.