NERC CIP standards are mandatory and enforceable for a specific scope of assets. To what do they apply?
- A.All federal information systems in the United States
- B.The Bulk Electric System (BES) in North America
- C.Drinking water treatment facilities
- D.Pipeline SCADA systems regulated by TSA
Why B is correct
NERC CIP (Critical Infrastructure Protection) standards apply to the Bulk Electric System across North America and are enforced through penalties overseen by NERC and FERC. They do not govern water systems or pipelines, which fall under other authorities such as EPA and TSA.
Know someone studying for OT Security Fundamentals? Send them this one.