NERC CIP standards are mandatory and enforceable for a specific scope of assets. To what do they apply?
- A.The Bulk Electric System (BES) in North America
- B.All federal information systems in the United States
- C.Drinking water treatment facilities
- D.Pipeline SCADA systems regulated by TSA
Why A is correct
NERC CIP (Critical Infrastructure Protection) standards apply to the Bulk Electric System across North America and are enforced through penalties overseen by NERC and FERC. They do not govern water systems or pipelines, which fall under other authorities such as EPA and TSA.
Know someone studying for OT Security Fundamentals? Send them this one.