Risk Based Assessments & Cyber Asset Identification Services
Challenge: Do you own an asset that if destroyed, degraded, compromised or otherwise rendered unavailable, can impact the reliability of the Bulk Electric System?
Have you identified your Critical Assets? Have you identified your Cyber Assets? Have you identified your Critical Cyber Assets? According to the NERC CIP 002 Standard, you must identify your Critical Assets to determine whether you must be in compliance with the remaining CIP 003 - 009 Standards. This is no easy task and many responsible entities are struggling with how to accomplish this critical first step to successful compliance. Have you fully documented your CIP-002 Methodology AND the decisions that support your conclusions? The accuracy and completeness of your audit package will be reviewed by reglatory auditors. Are you ready!
WE ARE EXPERIENCED PROFESSIONALS YOU CAN TRUST
Solution: Risk Based Assessments & CIP-002 Cyber Asset Identification Services from Complyant Solutions.
Complyant Solutions understand the difficulty in developing a risk-based methodology to identify Critical Assets and Critical Cyber Assets, our Risk Based Assessments & Cyber Asset Identification Services will assist you in determining the processes, procedures, and appropriate level of documentation to support your successful compliance. Auditors WILL review your CIP-002 documentation.
The most critical of all of the NERC CIP standards is CIP 002 as it sets the foundation for all of the other efforts. This standard is the identification and documentation of the ‘critical assets’ and ‘critical cyber assets’ within the electric utility. This should be carried out with great detail as it is most important to understand what is being protected before a cyber security program can be developed.
Here’s why we are uniquely qualified to assist you with this important first step toward ensuring NERC CIP compliance:
- Our Unique Cyber Security Practice - Complyant Solutions has an established Cyber Security Practice dedicated to addressing our nations critical infrastructures and our clients’ needs around the security of their critical cyber assets.
- Continuous Involvement in NERC CIP Committee Activities - Our team leads are actively involved in the NERC CIP Risk Assessment Working Group Committee and are providing input and feedback that is instrumental to the development of additional guidance to responsible entities in determining critical cyber assets. This drafting team was created to respond to FERC Order 706. We are like no other service provider on the market today, we will bring the most current and up to date information to our clients.
- Our Risk Assessment Development Process and Methodology Are Tried and True - We have completed similar assignments relating to NERC CIP compliance and are methodologies are based on industry and technology accepted best practices. Complyant Solutions’ approach to Risk-Based Assessments for Identifying Critical Assets is based on the current draft of the NERC Security Guideline for the Electricity Sector: Identifying Critical Assets and Critical Cyber Assets.
- Experienced Client Service Team - Our client service team is led by experienced cyber security and industry professionals processing both the practical hands on, auditing, internal controls assessment, and consulting experience. Complyant Solutions will combine our expertise and experience to ensure quality service and your full satisfaction.
Our Risk Based Assessments & CIP-002 Cyber Asset Identification Services can:
- Develop your risk assessment asset identification methodology
- Provide training, knowledge transfer, and implement the most current version of the NERC “guideline” Methodology for identifying Critical Assets and Critical Cyber Assets
- Facilitate sessions and assist you in the identification of assets
- Prepare “Audit Documentation” package - This is an important task that can not be overlooked…Auditor’s will review your documentation to determine whether you are meeting the requirements. You can NOT afford to have incomplete or inaccurate documentation!
- Review and recommend improvements to your self-prepared audit documentation and conclusions
- Prepare you and support you during the audit
Complyant Solutions is the industry leader in Risk Based Assessments and Methodologies to determine critical assets and critical cyber assets Our unparalleled audit and control expertise and in-depth knowledge of NERC Risk Assessment Working Group activities have made us the first choice of leading companies. Protect your Critical Cyber Assets and vital business information. Compete with Control. Confidence. Compliance. Call on experience you can trust: The Cyber Security Services team at Complyant Solutions.
