# NERC Critical Infrastructure Protection Standards

Framework id: `nerc_cip`. Energy Regulation. Publisher: North American Electric Reliability Corporation (NERC). Version: v5-7 (2024). Region: North America. Mapping licence: CC BY-SA 4.0.
Source text: https://www.nerc.com/pa/Stand/Pages/CIPStandards.aspx

Each line is a clause, the NIST SP 800-53 controls OSA maps to it, and OSA's estimate of how far those controls cover it.
Clause titles and coverage figures are OSA's own summaries and estimates. No line-by-line check against the source text is recorded for this framework, so quote the source, not this card.

## Clauses (14, average coverage 78%)
- CIP-002-7 BES Cyber System Categorization: RA-02, RA-03, PM-07, PM-11, SC-07 (72%)
- CIP-003-9 Security Management Controls: PL-01, PL-02, PM-01, PM-02, PM-03, PM-09, AC-01, AT-01 (82%)
- CIP-004-7 Personnel & Training: AT-01, AT-02, AT-03, AT-04, PS-01, PS-02, PS-03, PS-04, PS-05, PS-06, PS-07, AC-02 (85%)
- CIP-005-7 Electronic Security Perimeter: SC-07, AC-04, AC-17, AC-20, IA-02, IA-08, CM-07 (80%)
- CIP-006-6 Physical Security of BES Cyber Systems: PE-01, PE-02, PE-03, PE-04, PE-05, PE-06, PE-08, PE-16, PE-18 (78%)
- CIP-007-6 System Security Management: CM-07, SI-02, SI-03, SI-04, AU-02, AU-06, AC-02, AC-03, IA-05 (85%)
- CIP-008-6 Incident Reporting and Response Planning: IR-01, IR-02, IR-04, IR-05, IR-06, IR-08 (78%)
- CIP-009-6 Recovery Plans for BES Cyber Systems: CP-01, CP-02, CP-04, CP-09, CP-10, IR-04 (82%)
- CIP-010-4 Configuration Change Management and Vulnerability Assessments: CM-02, CM-03, CM-04, CM-06, CM-08, RA-05, CA-08 (85%)
- CIP-011-3 Information Protection: MP-01, MP-02, MP-04, MP-06, SC-28, AC-03 (80%)
- CIP-012-1 Communications between Control Centers: SC-08, SC-12, SC-13, SC-23 (75%)
- CIP-013-2 Supply Chain Risk Management: SR-01, SR-02, SR-03, SR-05, SR-06, SR-11, SA-04, SA-09, SA-22, CM-14 (78%)
- CIP-014-3 Physical Security: PE-01, PE-03, PE-06, RA-03, RA-05, PM-12 (65%)
- CIP-015-1 Internal Network Security Monitoring (INSM): SI-04, SC-07, CA-07, IR-04, SC-48, AU-06 (68%)

## More
- A pattern's controls with their clauses in this framework: /api/v1/patterns/{id}/crosswalk?framework=nerc_cip
- Control-to-clause mappings as JSON: /api/v1/frameworks/nerc_cip?fields=mappings&per_page=100
- Rationale and gaps for each clause, as JSON: https://raw.githubusercontent.com/opensecurityarchitecture/osa-data/main/data/framework-coverage/nerc-cip.json
- Page for people: /frameworks/nerc-cip/