CIP-007 - System Security Management

CIP-007 sets out the NERC requirements for managing the security of cyber assets that support the bulk electric system. It requires entities to develop and maintain security policies, conduct training and awareness, implement vulnerability management and incident-response procedures, and regularly assess compliance to protect critical infrastructure from cyber threats.