NERC CIP COMPLIANCE
NERC CIP Compliance Mapping
Map internet-exposed OT assets to NERC CIP-002 through CIP-015 controls for the Bulk Electric System.
NERC CIP standards require registered entities to identify, categorize, and protect BES Cyber Systems. But traditional compliance approaches focus on known, inventoried assets inside the network perimeter. What about the assets you don’t know are internet-exposed?
ShiftSix’s outside-in approach discovers BES Cyber Assets that are internet-reachable—assets that may be missing from your CIP-002 categorization, violating your CIP-005 Electronic Security Perimeter, or failing CIP-007 system security requirements.
How ShiftSix Maps to NERC CIP
BES Cyber System Categorization
ShiftSix discovers internet-exposed BES Cyber Assets and associated Electronic Access Points that may not be included in your current CIP-002 categorization. Assets visible from the internet require re-evaluation of their impact rating.
Electronic Security Perimeter
External scanning identifies failures in Electronic Security Perimeter (ESP) boundaries—OT assets reachable from the internet indicate ESP gaps requiring immediate remediation.
System Security Management
Exposed devices are correlated with CISA KEV vulnerabilities, default credentials, and missing authentication—mapping directly to CIP-007 patch management and access control requirements.
Configuration Change Management
Continuous monitoring detects configuration drift that creates new external exposure, supporting CIP-010 baseline management and vulnerability assessment requirements.
Internal Network Security Monitoring
While CIP-015 focuses on internal monitoring, ShiftSix provides the complementary external perspective—identifying what internal monitoring misses because it sits outside the network boundary.