CIP-011 - Information Protection

CIP-011 sets requirements for safeguarding sensitive cyber information used in the operation of bulk electric systems, defining how such data must be classified, handled, stored, and transmitted. It mandates documented protection policies, access controls, encryption, personnel training, and procedures for detecting and responding to information-security incidents.