Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Compliance

Tripwire Launches NERC Compliance Solution

Tripwire, a provider of security risk and compliance management tools, this week launched its NERC Solution Suite, a combination of customized tools and services designed to help utilities automate, achieve and maintain North American Electrical Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) compliance.

Tripwire, a provider of security risk and compliance management tools, this week launched its NERC Solution Suite, a combination of customized tools and services designed to help utilities automate, achieve and maintain North American Electrical Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) compliance.

Based on the company’s Tripwire Enterprise and Tripwire Log Center, The NERC Solution Suite provides security configuration management and incident detection solutions, and specialized intelligence including policy rules, correlation rules, tools, templates, customized reports and dashboards.

Tripwire LogoTripwire says its NERC Solution Suite dramatically reduces the time and resources required to pass NERC CIP audits and minimize audit findings.

As cyber attacks against energy firms has increased, pressure on energy firms to improve NERC CIP compliance – particularly requirements connected with cyber security – has increased.

Achieving and maintaining NERC CIP compliance can be difficult because the requirements change frequently. Compliance also requires continuous monitoring of critical assets as well as periodic collection of detailed evidence. The steps necessary to pass an audit can be extremely time consuming, are often done manually and can be error-prone.

Key features include:

• Audit-ready reports and dashboards that deliver evidence conveniently grouped by CIP requirement

• Continuous monitoring that immediately detects detailed status information across a wide range of critical cyber assets, from computer systems and network devices to badge entry systems and SCADA devices

• Automated assessment and aggregation of this security data alerts to potential security breaches or configuration modifications affecting compliance status

Advertisement. Scroll to continue reading.

• Support for a broad range of regulations beyond NERC CIP requirements, including PCI, HIPAA and SOX

“The NERC Solution Suite is a flexible package that encapsulates technology and industry expertise to help our electricity sector customers prepare for and achieve compliance with NERC CIP versions 3, 4 and 5,” said Jeff Simon, director of service solutions for Tripwire.

More information is available online.

Related: U.S. Utilities Face Constant Barrage of Attacks

Written By

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Professional services company Slalom has appointed Christopher Burger as its first CISO.

Allied Universal announced that Deanna Steele has joined the company as CIO for North America.

Former DoD CISO Jack Wilmer has been named CEO of defensive and offensive cyber solutions provider SIXGEN.

More People On The Move

Expert Insights

Related Content

Malware & Threats

The NSA and FBI warn that a Chinese state-sponsored APT called BlackTech is hacking into network edge devices and using firmware implants to silently...

Compliance

The three primary drivers for cyber regulations are voter privacy, the economy, and national security – with the complication that the first is often...

Compliance

Government agencies in the United States have made progress in the implementation of the DMARC standard in response to a Department of Homeland Security...

Application Security

Virtualization technology giant VMware on Tuesday shipped urgent updates to fix a trio of security problems in multiple software products, including a virtual machine...

Application Security

Fortinet on Monday issued an emergency patch to cover a severe vulnerability in its FortiOS SSL-VPN product, warning that hackers have already exploited the...

Compliance

Web scraping is a sensitive issue. Should a third party be allowed to visit a website and use automated tools to gather and store...

Cloud Security

Proofpoint removes a formidable competitor from the crowded email security market and adds technology to address risk from misdirected emails.

Application Security

Microsoft on Tuesday pushed a major Windows update to address a security feature bypass already exploited in global ransomware attacks.The operating system update, released...