Today’s LiveWire Spotlight examines FERC Order 843, which announces the approval of CIP-003-7. The standard strengthens the cyber protections required of Low-Impact BES Cyber Systems by calling for all forms of inbound and outbound routable traffic to be protected, and adding controls for transient electronic devices and portable media.
CIP-003-7 will become mandatory and effective in the U.S. on January 1, 2020. In addition, FERC has approved an extension for CIP-003-6 Requirement R2, Attachment 1, Sections 2 and 3 (Low-Impact physical and electronic security controls execution) to the same date.