Compliance Mandates: NERC CIP

How BOUNCER Helps You Meet the North American Electric Reliability Corporation Critical Infrastructure Protection Standards

Helping Meet NERC/CIP Compliance

The systems comprising our nation's critical infrastructure, such as SCADA and DCS systems, are critical to the safety of our national power grids and other energy and transportation systems. The North American Electric Reliability Corporation (NERC) was formed to ensure the reliability and adequacy of power in the United States. NERC Critical Infrastructure Protection guidelines deal with the protection of the systems that comprise the Nation's infrastructure.

As a professional in the energy industry, we know that you are tasked not only with defending these important systems; you must also meet the strict NERC CIP government regulations mandating their safety. While there is no silver bullet for achieving regulatory compliance and passing audits, BOUNCER by CoreTrace is designed to help simplify your ability to meet several of the NERC CIPs simultaneously without adding unnecessary burdens on your IT staff. BOUNCER combines unmatched security for your endpoints with intuitive administration designed with the user in mind.

We Understand Your Needs

In order to ensure your critical SCADA and DCS systems adhere to today's federal regulations, there are a number of requirements that must be met and technical realities that must be addressed, including:

  • Protecting the performance and availability of remote systems with limited resources and inconsistent communications

  • Preventing malware from infecting and disrupting system operation

  • Documenting the implementation of security patches or having analogous compensating controls

  • Monitoring events and stopping unauthorized changes by outside threats and internal errors

How BOUNCER Can Help You

Backed by a responsive team of security professionals with significant experience protecting critical infrastructure, BOUNCER is designed to simultaneously enforce, rather than simply report on, compliance with several CIP requirements in one solution, including:

  • CIP-003 - Control Configurations:
    BOUNCER helps you meet the CIP requirement that mandates change control and configuration management by ensuring that only authorized executables can run on your managed endpoints.

  • CIP-007 - Prevent Malware
    BOUNCER helps you meet the CIP requirement requiring you to stop all malware on your critical infrastructure and implementing and documenting security patches. Without impacting performance, BOUNCER prevents even the most sophisticated attacks, including memory exploits and those leveraging unpatched vulnerabilities.

  • CIP-008 - Report Incidents
    BOUNCER provides reporting capabilities that help document adherence with the CIP guideline around security incident reporting and handling requirements.

Next Steps

  1. Sales and Evaluations

    If you are thinking application whitelisting is a possible solution to problems or pains within your organization, pick up the phone and call one of our representatives today at 512-592-4111, or click below to request a call back.

    Contact us now.

  2. BOUNCER Information

    Learn more about BOUNCER's capabilities and benefits in the product section.

    Read more about BOUNCER.

  3. Additional Resources

    CoreTrace has many whitepapers, case studies, webinars, and demonstrations that can help you learn more about BOUNCER's real world benefits.

    Browse the Resource Section.