North American Electric Reliability Council

Download PDF


Client Profile
The North American Electric Reliability Corporation's mission is to ensure the reliability of the bulk power system in North America. To achieve that, NERC develops and enforces reliability standards; assesses adequacy annually via 10-year and seasonal forecasts; monitors the bulk power system; evaluates users, owners, and operators users for preparedness; and educates, trains, and certifies industry personnel. NERC is a self-regulatory organization, subject to oversight by the U.S. Federal Energy Regulatory Commission and governmental authorities in Canada.

Executive Summary
NERC appointed DYONYX to implement an education program for the recently approved Critical Infrastructure Protection (CIP) Cyber Security Standard. The CIP standard was developed by industry participants to "ensure that all entities responsible for the reliability of the Bulk Electric Systems in North America identify and protect Critical Cyber Assets that control or could impact the reliability of the Bulk Electric Systems." The scope of the program is critical in providing an understanding of the CIP standards to an anticipated 1,000 participants in the electric utility industry, throughout the United States, Canada, and Mexico responsible for implementing and complying with the CIP standards.

DYONYX was selected for this important project via a formal procurement process and from a list of fifteen firms. According to DYONYX vice president and practice leader, Ron Blume, "We are very pleased that NERC has recognized our contribution and capabilities in serving the utility industry. The DYONYX energy practice consultants average 27 years of experience in the electric utility industry. We understand both the business and technical operations perspectives of the electric utility industry, enhancing our ability to appropriately frame risk assessment alternatives and provide real world education.

DYONYX brings to the project considerable formal security-specific training and curriculum development experience at the university and client level to the project. These capabilities, coupled with their experience in securing transmission grid operations and mission critical application systems has been demonstrated with similar work for customers such as the Electric Reliability Council of Texas (ERCOT), Midwest Independent Transmission System Operator (Midwest ISO), and the Electric Power Research Institute (EPRI).

Blume added: "As a result of our extensive security training, physical and cyber security assessment experience, standard-compliant policy and procedure development project expertise, and security research and development efforts in the electric utility industry, DYONYX will provide NERC with a high quality Cyber Security Standard Education Program, and looks forward to being a part of this important project."

To learn more, visit www.dyonyx.com