NERC CIP Program Development

Location: Nationwide

Client: FPL Group

Completion Date: December 2009

Burns & McDonnell worked with the Power Generation Division (PGD) of FPL Group on the implementation of North American Electric Reliability Corp. Critical Infrastructure Protection (NERC CIP) control system security measures at 10 power plants.

Burns & McDonnell coordinated with PGD project managers and generation site instrumentation and controls personnel to develop policies and procedures to govern the process of complying NERC CIP at the individual sites. Overall governance is often painful, and Burns & McDonnell’s expertise helped generation plants make the necessary changes to meet CIP compliance.

Burns & McDonnell developed the electronic security perimeter concept design in conjunction with the FPL Group information management department. The design was effectively implemented at each generation site, allowing for greater efficiency to be realized in the management and access control of the electronic security perimeters.

Burns & McDonnell served as technical subject matter experts, aiding in the installation and configuration of vendor-supplied equipment at each of the sites. Working during outages and short notice maintenance windows, Burns & McDonnell personnel either implemented or guided the implementation of the system security management requirements of NERC CIP on control systems.

As the final piece, Burns & McDonnell generated as-implemented documentation of the controls to serve as evidence during an audit. The documentation is designed to be auditor friendly, reducing the time necessary to present information.

  • NERC CIP consulting
  • Policy and procedure development
  • Control system security 
  • Networking design
  • System security design