Critical Infrastructure Protection Reliability Standard: Cyber Security—Internal Network Security Monitoring

Key Points

• 1Electric utilities must install and use monitoring systems to detect unauthorized access or attacks on their internal computer networks
• 2Companies must continuously watch for suspicious activity rather than just checking occasionally, helping catch problems before they cause blackouts
• 3The rule applies to all utilities that operate critical parts of the U.S. electrical grid serving millions of customers
• 4Utilities must respond quickly when they detect potential security threats to prevent cyberattacks from spreading or causing damage
• 5This protects everyday Americans by making the power grid more resilient against hackers and other cyber threats

Impact Assessment

Key Dates