FERC issued a Notice of Proposed Rulemaking (NOPR) on July 16, 2015 proposing to approve the revisions to version 5 (V5) of the NERC Critical Infrastructure Protection (CIP) Reliability Standards on July 16, 2015. FERC approved CIP V5 in Order 791 on November 22, 2013. While Order 791 approved all of the CIP V5 standards, FERC directed NERC to:
(1) remove the “identify, assess, and correct” language in 17 of the CIP Requirements;
(2) develop enhanced security controls for low impact BES Cyber Systems;
(3) develop controls to protect transient electronic devices (e.g., thumb drives and laptop computers);
(4) create a NERC Glossary definition for the term “communication networks,” and develop new or modified Reliability Standards to protect the nonprogrammable components of communications networks.