90 likes | 201 Vues
This document outlines the incremental and recurring costs associated with complying with Critical Infrastructure Protection (CIP) standards. It provides a comprehensive breakdown of labor, equipment, software, and other related expenses necessary for effective CIP compliance management. With a team of seasoned energy consultants and extensive experience in NERC compliance programs, the document also highlights methodologies for compliance risk assessments and details the services offered, including CIP program management and audit preparation. It emphasizes the importance of protecting critical infrastructure within the energy sector.
E N D
Interconnection Reliability Operating Limit Critical Infrastructure Protection Cost Recovery Spreadsheet May 16, 2019 Westborough, MA
NON-REOCCURING CIP COMPLIANCE COSTS • Facility Staff Labor • Compliance Staff Labor • Other Labor • Equipment Costs • Software/Application Implementation Costs • Outside Services and Fees • Physical Improvement Costs
REOCCURING CIP COMPLIANCE COSTS • Facility Staff Labor • Compliance Staff Labor • Other Labor • Equipment Costs • Software/Application Licenses, Maintenance & Support, and Upgrade Costs • Outside Services and Fees • Physical Improvement Costs • Production, Printing, and Shipping Costs
COSTS NOT SEPARATELY INCLUDED IN REQ. DETAIL TAB • Labor • Hardware • Software • Outside Services and Fees • Physical Improvement • Other
EXPERIENCE • Team of experienced Energy Consultants (averaging 27 years of industry experience) with qualifications in implementing successful NERC compliance programs • Active participants in NERC committees such as Critical Infrastructure Protection Committee (CIPC), Control Systems Security Working Group (CSSWG), Compliance & Enforcement Input Working Group (CEIWG), etc. • Conducted over 50 NERC CIP audits in multiple regions • Proven Critical Asset Methodology and Compliance Risk Assessments for Entities in FRCC, MRO, NPCC, RF, SERC, SPP, TRE, and WECC • Skilled in use of Generally Accepted Government Auditing Standards (GAGAS)
Ingrid Rayo, ILO, GCIP, GICSP Infrastructure Liaison Officer \ Global Industrial Cyber Security Professional \ GIAC Critical Infrastructure Protection Compliance & Critical Infrastructure Protection O 281-733-4607 \ F 314-682-1600 irayo@burnsmcd.com \burnsmcd.com Proud recipient of PSMJ’s Premier Award for Client Satisfaction offering the following Cyber Security services: CIP Program Management | Technical Implementation | DCS/EMS Security Integration | FAT/SAT Testing | Physical Security | Procedural Implementation | Internal Control – RAI | Compliance Assessment-Gap Analysis | Audit Preparation | Mock Audit | Process & Procedure Development