homepage
Open menu
Talk with an expert

A Zero-Trust User Access Model Can Expedite Compliance with New Looming NERC CIP Regulations

The North American Electric Reliability Corporation's Critical Infrastructure Protection (NERC CIP) standards are pivotal in safeguarding the reliability and security of the North American power grid. With the deadline for NERC CIP-003-9 looming in April 2026, asset owners face significant challenges in aligning their cybersecurity measures with these stringent requirements. This presentation will explore challenges and elements for key NERC CIP-003-9 requirements and an example of successful implementation

Introduction to NERC CIP-003-9 Requirements:

  • Overview of the NERC CIP-003-9 standards with a focus on access control and management
  • Explanation of the April 2026 deadline implications for power generation asset owners.

NERC CIP-003-9 Elements:

  • Secure Access Control: Ensures compliance by providing secure, context-aware access to critical cyber assets.
  • Identity Verification: Advanced user authentication aligns with NERC’s requirements for identity and access management.
  • Monitoring and Logging: Continuous monitoring and detailed logging capabilities support incident response and recovery plans as required by NERC.
  • Remote Access Management: Secure, controlled remote access aligns with NERC’s mandates for remote access management.
  • Configuration Management: Helps maintain information about hardware and software configurations, ensuring compliance with NERC’s asset management requirements.

Case Study and Implementation Strategy:

  • Example of successful implementation with power generation OEM.
  • Strategic recommendations for meeting the 2026 deadline.

Conclusion:

  • Summary of capabilities in ensuring NERC CIP-003-9 compliance.
  • Final thoughts on enhancing overall cybersecurity posture through zero-trust security.
  • This session will equip asset owners with the knowledge and tools to efficiently transition to a compliant and secure infrastructure and meet NERC CIP-003-9.

Login to Register
SPONSORSHIP_2023_Analyst_-_Ask_the_Expert.jpg

Thank You to Our Sponsor

Xona Logo-Full Color.png

This webinar is offered free of charge through collaboration between SANS and its sponsor(s). If you prefer not to share your registration details with sponsor(s), a recorded webinar will be available approximately 30 days after its initial release through the SANS archive. To access the recording, you will need to create a SANS account, but your information will not be shared with the sponsor(s).

Related Content

Blog
Blog - ICS Cybersecurity Awareness_Strengthening Critical Infrastructure Through Practical Skill Deployment_340 x 340.jpg
Industrial Control Systems Security
ICS Cybersecurity Awareness: Strengthening Critical Infrastructure Through Practical Skill Deployment
Equipping personnel with the skills to identify and mitigate threats is essential to secure ICS/OT systems effectively.
DeanParsons_340x340.png
Dean Parsons
read more
Blog
Security Awareness, Artificial Intelligence (AI), Digital Forensics, Incident Response & Threat Hunting, Cloud Security, Cyber Defense, Offensive Operations, Pen Testing, and Red Teaming, Industrial Control Systems Security, Open-Source Intelligence (OSINT)
Top SANS Summit Talks of 2024
This year, SANS hosted 13 Summits from OSINT, ICS, Ransomware, DFIR to HackFest. Here were the top-rated talks of the year.
370x370-person-placeholder.png
Alison Kim
read more
Blog
Industrial Control Systems Security
Michael J. Assante ICS Security Lifetime Achievement Award
2024 Recipient - Zach TudorThe SANS ICS Security team is pleased to announce Zach Tudor as this year's recipient of the SANS Institute’s Michael J. Assante ICS Security Lifetime Achievement Award. Mr. Zachary (Zach) Tudor is the associate laboratory director of Idaho National Laboratory’s National...
ICS_Icon_Blue.png
SANS ICS Security
read more