02 — Capability · BC-1580.40
Critical Infrastructure Protection Compliance
Meet the mandatory protection standards that apply to bulk power, gas and water systems, by classifying covered assets, applying required controls and keeping audit-ready evidence.
- CIP Compliance
- Critical Infrastructure Compliance
- Grid Security Standards
In scope
- Identifying and categorizing covered systems and sites
- Mapping required controls to evidence
- Audits, self-reports and mitigation plans
Out of scope
- The cybersecurity program and security operations (see BC-760)
- Physical security guarding and monitoring (see BC-840)
Realized by · 0
- No product in the catalog yet.
Used in · 0
- Not yet placed on a value stream.
Build it · 1
Decomposes into · 3
- BC-1580.40.10Covered Asset CategorizationIdentify which control centers, substations, plants and systems fall under protection standards and at what impact level.
- BC-1580.40.20Protection Control EvidenceCollect and organize evidence that each required control operated throughout the period for every covered asset.
- BC-1580.40.30Protection Audit & Self-ReportPrepare for regulatory audits, self-report possible violations and carry out the agreed mitigation plans.