SANS Institute To Offer Computer-based NERC Critical Infrastructure Protection Training

BETHESDA, Md., July 6, 2015 /PRNewswire-USNewswire/ -- SANS Institute, the global leader in information security training, has joined forces with industry leaders to develop training that helps ensure the reliability of the North American bulk electric system. The complimentary SANS webcast, taking place July 15, 2015, will discuss the Challenges and Strategies for Addressing the NERC CIP Version 5 Training Requirements.

The NERC Critical Infrastructure Protection (CIP) Version 5 standards which address the security of cyber assets essential to the reliable operation of the North American bulk electric system become enforceable on April 1, 2016. Compared to previous versions, the Version 5 standards include significantly increased training requirements for persons with authorized access to those cyber assets. The new standards which increase the number of facilities subject to the CIP requirements also result in an increase in the number of personnel requiring training. However developing, deploying, and maintaining the needed training content can be a challenge for most entities. The CIP standards are complex and in the case of the training standards, identifying the topics that must be covered is not necessarily obvious and getting it wrong can result in security gaps and penalties. Adding to the challenge, entities subject to earlier versions of the standards often had difficulty dedicating the internal resources needed to keep their custom training materials current. Those choosing to outsource their training efforts were quickly confronted with the high cost of custom training development.

To help the electric industry address the challenges of NERC CIP training, SANS has developed the CIP Version 5 CBT program consisting of thirteen individual modules addressing forty-nine topic areas. The training was developed by SANS team members experienced in developing and supporting NERC CIP compliance programs. The development team also worked with an Advisory Board consisting of fifteen CIP practitioners from electric utilities, Independent System Operators and a former NERC auditor. The Advisory Board participated throughout the development process beginning with defining what the training should include, and provided feedback on module scripts, video imagery, and end-of-module quiz questions. The result is an affordable training program that is consistent, technically accurate, highly engaging, and backed by the SANS reputation for quality.