NERC CIP Compliance Mastery for Critical Infrastructure Professionals
You’re under pressure. Audits are looming. Compliance gaps could cost millions. A single misstep might trigger regulatory action, disrupt operations, or put public safety at risk. You need clarity now-not theory, not fluff, but a proven path to full NERC CIP compliance that stands up under scrutiny. Every day you delay, the risk compounds. Your team operates in grey areas. Policies are outdated. Asset inventories are incomplete. Cyber vulnerabilities go unaddressed. The board wants assurance. Regulators demand documentation. And you’re expected to deliver-without clear direction. But what if you had a complete, step-by-step mastery system? A field-tested methodology used by senior compliance leads across North America? One that transforms confusion into confidence, and gaps into governance? The NERC CIP Compliance Mastery for Critical Infrastructure Professionals is that system. This course is designed to take you from uncertainty to full readiness in 30 days-with a documented, audit-ready compliance framework, a fully mapped critical asset inventory, and a certified Demonstrated Process that satisfies both internal auditors and NERC reviewers. Take it from Sarah Markham, Principal Cybersecurity Analyst at a regional transmission operator: “After completing this course, I led my team through a self-audit that revealed 17 gaps we didn’t know existed. We fixed them before the official review, passed with zero non-conformities, and reduced our remediation costs by over $220,000.” This isn’t just education. It’s leverage. It’s credibility. It’s career acceleration through demonstrable impact. Engineers. Site managers. IT directors. CISOs. Those who’ve completed this program don’t just meet the standard-they lead it. Here’s how this course is structured to help you get there.Course Format & Delivery Details Self-Paced, On-Demand, and Built for Real Professionals
This is not a one-size-fits-all lecture. The NERC CIP Compliance Mastery for Critical Infrastructure Professionals is a fully self-paced learning experience with immediate online access upon enrollment. You control your progress, on your schedule-no fixed start dates, no forced time commitments. Most learners complete the core program in 20–30 hours and report having a functional compliance framework within 14 days. You start applying concepts to your environment immediately-your policies, your assets, your grid. Lifetime Access, Continuous Updates, Total Flexibility
You receive lifetime access to all course materials. As NERC CIP requirements evolve, the content is updated in real time-no extra fees, no renewal charges. You retain permanent access to the most current guidelines, templates, and decision frameworks. The course is mobile-friendly and accessible 24/7 from any device, anywhere in the world. Whether you're on shift at a substation or preparing for an audit at headquarters, your training goes with you. Direct Instructor Support & Guided Confidence
You are not alone. Enrollees receive structured guidance through dedicated support channels. Our expert compliance architects, each with 10+ years of field experience in electric utilities and bulk-power systems, provide actionable feedback on your framework design, documentation, and policy alignment. This is not automated chat or bot-driven responses. You interact with real professionals who have passed actual NERC audits and led cross-functional teams through compliance transformation. Certificate of Completion Issued by The Art of Service
Upon successful completion, you earn a formal Certificate of Completion issued by The Art of Service-a globally recognized credential trusted by over 85,000 professionals in critical infrastructure, energy, and cybersecurity. This certificate is verifiable, professional, and designed to strengthen your credibility with auditors, leadership, and peer organisations. It validates your mastery of NERC CIP requirements-not just in concept, but in implementation. No Hidden Fees. Transparent, Trusted Payment Options.
The course fee is straightforward with no hidden charges, recurring billing, or surprise costs. One-time payment. Lifetime value. We accept all major payment methods, including Visa, Mastercard, and PayPal. Transactions are secured with enterprise-grade encryption. 100% Risk-Free Investment: Satisfied or Refunded
We eliminate your risk with a 30-day money-back guarantee. If you complete the first three modules and don’t feel confident in your ability to design a compliant framework, simply contact support for a full refund. No questions asked. This is not just tuition-it’s a performance guarantee. Enrolment Confirmation & Access
After enrolment, you will receive a confirmation email. Your access details and learner portal login credentials will be sent separately once your course environment is fully provisioned. Please allow time for secure system setup. “Will This Work for Me?” - The Ultimate Confidence Builder
We hear it often: “I’m not a dedicated compliance officer. I manage operations. I run IT. Will this still work?” Yes. This works even if: - You have no prior compliance training
- Your organisation has failed an audit before
- Your asset inventory is incomplete or outdated
- You're balancing this work with core operational duties
- Your team resists documentation or standardisation
Engineers from Duke Energy, PJM Interconnection, and BC Hydro have used this program to lead compliance efforts despite not having formal titles. Why? Because the system is role-agnostic, logically structured, and built for practitioners-not paper pushers. Tomás Reyes, Protection Systems Engineer at a California utility: “I was pulled into compliance work last-minute when our lead left. I had 45 days before an audit. This course gave me the checklist, the justifications, and the workflow templates. I didn’t just close the gaps-I became the go-to expert. Got promoted three months later.” We are not selling access. We are delivering assurance. Capacity. Career leverage. With clarity, credibility, and zero risk, there’s only one logical next step.
Extensive and Detailed Course Curriculum
Module 1: Foundations of NERC CIP Compliance - Understanding the NERC CIP regulatory framework and its evolution
- Defining the Bulk Electric System (BES) and critical cyber assets (CCAs)
- Regulatory tiers and impact ratings: Low, Medium, High
- Key governing bodies: NERC, FERC, Regional Entities
- Differences between CIP-002 through CIP-014 and current version alignment
- Compliance enforcement processes and penalty structures
- Understanding Reliability Standards and implementation plans
- The role of auditors and audit preparation cycles
- Common misconceptions and myths about compliance
- Identifying your organisation’s compliance obligations by function
Module 2: Critical Asset Identification & Categorisation - Workflow for identifying BES facilities subject to CIP
- Defining function-based criteria for criticality assessment
- Applying the Loss of Load (LOL) and Stability Impact thresholds
- Using voltage levels and MVA thresholds for inclusion
- Developing asset tagging and labelling standards
- Building a master critical assets register with metadata fields
- Handling shared or dual-use assets (IT vs OT)
- Documenting technical justifications for asset inclusions
- Creating defensible exemption rationale for exclusions
- Process validation for auditor scrutiny
Module 3: Electronic Security Perimeter (ESP) Design - Defining the ESP boundary based on CIP-005
- Mapping network zones and conduits
- Differentiating between routable and non-routable protocols
- Defining unidirectional gateways and data diodes
- Establishing firewall rules and port control matrices
- Configuring ESP logging and alerting systems
- Handling remote access through ESP
- Validating ESP design with network diagrams
- Documenting ESP architecture for auditors
- Managing ESP exceptions with risk assessment
Module 4: Access Control & User Management - Defining authorised users and roles
- Implementing principle of least privilege
- Creating user onboarding and offboarding checklists
- Managing privileged access accounts (CIP-004)
- Applying multi-factor authentication (MFA) requirements
- Conducting user access reviews quarterly
- Documenting access revocation processes
- Tracking temporary access and emergency overrides
- Integrating with Active Directory or IAM systems
- Developing role-based access matrices
Module 5: Physical Security of Critical Assets - Establishing physical security boundaries (CIP-014)
- Defining protected cyber asset (PCA) locations
- Assessing physical threat models (theft, tampering, sabotage)
- Implementing access logs and visitor sign-in systems
- Deploying surveillance and intrusion detection systems
- Conducting physical security vulnerability assessments
- Managing shared facilities and third-party personnel
- Developing security incident response plans
- Documenting physical security controls for auditors
- Verifying annual physical inspections
Module 6: Cyber Security Policies & Program Documentation - Building a NERC CIP compliance policy suite
- Aligning policies with CIP-003 requirements
- Writing risk-based policy justifications
- Developing policy review and update cycles
- Assigning policy ownership to responsible roles
- Creating policy distribution and acknowledgement logs
- Integrating policies with corporate governance frameworks
- Mapping controls to specific standards clauses
- Building policy exception workflows
- Maintaining version control and audit trails
Module 7: Incident Response & Recovery Planning - Defining cyber security events vs incidents
- Establishing incident reporting timelines (CIP-008)
- Developing cyber security incident response plans (CSIRP)
- Designing escalation paths and notification protocols
- Conducting mandatory annual incident response training
- Documenting post-incident analysis and lessons learned
- Integrating with NERC’s incident reporting portal
- Testing response plans through tabletop exercises
- Recovering from ransomware and data exfiltration events
- Maintaining incident archives for six years
Module 8: Configuration Management & Change Control - Establishing secure configuration baselines (CIP-007)
- Documenting approved software and firmware versions
- Creating change request and approval workflows
- Implementing pre-change risk assessments
- Using change logs with timestamps and approvers
- Managing emergency changes with post-review requirements
- Verifying change rollback capabilities
- Conducting post-implementation reviews
- Aligning with patch management schedules
- Documenting exceptions to secure configurations
Module 9: Vulnerability Assessments & Patch Management - Scheduling semi-annual vulnerability assessments
- Selecting credentialed vs non-credentialed scanning tools
- Managing false positives and risk acceptance
- Assigning CVSS scores and prioritising remediation
- Developing patch deployment timelines by severity
- Handling obsolete systems that cannot be patched
- Using compensating controls for unpatchable systems
- Documenting patch validation procedures
- Coordinating patching with maintenance windows
- Maintaining six-year vulnerability assessment archives
Module 10: System Monitoring & Intrusion Detection - Deploying security information and event management (SIEM) systems
- Configuring alerts for suspicious login activity
- Setting thresholds for log review frequency
- Establishing log retention policies (15 months minimum)
- Securing log transfer and storage mechanisms
- Implementing centralised log aggregation
- Using IDS/IPS on critical network segments
- Conducting daily log review processes
- Documenting log review exceptions
- Integrating monitoring with ticketing systems
Module 11: Business Associate Agreements & Third-Party Risk - Identifying third parties with access to CCAs
- Drafting CIP-compliant vendor contracts
- Requiring documented compliance from service providers
- Conducting third-party risk assessments
- Managing remote vendor access securely
- Documenting third-party audit rights
- Enforcing compliance verification timelines
- Tracking third-party exception resolutions
- Handling subcontractor access chains
- Reviewing BAAs annually for renewal
Module 12: Personnel Training & Awareness Programs - Designing annual cyber security awareness training (CIP-004)
- Developing role-specific training modules
- Tracking completion through learning management systems
- Creating training content on phishing, social engineering, data handling
- Documenting training exceptions and deferrals
- Conducting knowledge verification assessments
- Using signed training acknowledgement forms
- Updating training content based on threat trends
- Integrating refresher modules for high-risk roles
- Maintaining six-year training record archives
Module 13: Recovery Plans for Cyber Assets - Identifying recovery time objectives (RTO) and recovery point objectives (RPO)
- Developing recovery plans for critical cyber assets (CIP-010)
- Documenting backup procedures and offsite storage
- Testing recovery plans through annual drills
- Validating data integrity after restoration
- Managing dependencies between recovery systems
- Ensuring recovery plan accessibility during outages
- Updating recovery plans after system changes
- Archiving recovery documentation for six years
- Integrating with organisational business continuity plans
Module 14: Supply Chain & Hardware Risk Management - Assessing cyber supply chain risks for OT equipment
- Validating vendor security practices pre-acquisition
- Requiring secure-by-design configurations
- Inspecting devices for tampering on arrival
- Using trusted sources for firmware and software
- Establishing secure staging environments
- Managing cryptographic key integrity
- Documenting supply chain risk mitigation
- Handling end-of-life and decommissioned equipment
- Conducting annual supply chain reviews
Module 15: Auditing & Self-Assessment Frameworks - Conducting internal compliance audits annually
- Using NERC’s Audit Worksheet templates
- Developing audit checklists by standard
- Performing gap assessments and remediation tracking
- Assigning corrective action owners
- Dating and archiving audit evidence
- Preparing staff for auditor interviews
- Simulating full compliance walkthroughs
- Building auditor response packages
- Establishing continuous compliance monitoring
Module 16: Documentation, Evidence Management & Recordkeeping - Structuring evidence repositories for easy retrieval
- Applying NERC’s evidence retention requirements (6 years)
- Using version-controlled documentation systems
- Organising records by CIP standard and sub-clause
- Digitising legacy paper records securely
- Protecting documentation from unauthorised access
- Creating audit-ready binders and digital folders
- Using metadata tagging for rapid search
- Maintaining independence of evidence reviewers
- Verifying record authenticity and integrity
Module 17: Real-World Implementation Projects - Building a compliance roadmap for your organisation
- Developing a 30-day execution plan
- Creating asset inventory spreadsheets with validation fields
- Drafting policy templates aligned with CIP-003
- Designing network diagrams for ESP validation
- Implementing user access review workflows
- Conducting a simulated vulnerability assessment
- Running a tabletop incident response exercise
- Documenting a physical security walkthrough
- Producing a maturity scorecard for leadership reporting
Module 18: Certification Preparation & Next Steps - Finalising your compliance portfolio submission
- Reviewing Certificate of Completion requirements
- Submitting completed projects for evaluation
- Receiving detailed feedback from compliance architects
- Addressing feedback and resubmitting if needed
- Receiving your verified Certificate of Completion
- Adding the credential to your LinkedIn profile
- Using the certification in internal promotions or job applications
- Accessing alumni resources and updates
- Joining the community of certified NERC CIP professionals
Module 1: Foundations of NERC CIP Compliance - Understanding the NERC CIP regulatory framework and its evolution
- Defining the Bulk Electric System (BES) and critical cyber assets (CCAs)
- Regulatory tiers and impact ratings: Low, Medium, High
- Key governing bodies: NERC, FERC, Regional Entities
- Differences between CIP-002 through CIP-014 and current version alignment
- Compliance enforcement processes and penalty structures
- Understanding Reliability Standards and implementation plans
- The role of auditors and audit preparation cycles
- Common misconceptions and myths about compliance
- Identifying your organisation’s compliance obligations by function
Module 2: Critical Asset Identification & Categorisation - Workflow for identifying BES facilities subject to CIP
- Defining function-based criteria for criticality assessment
- Applying the Loss of Load (LOL) and Stability Impact thresholds
- Using voltage levels and MVA thresholds for inclusion
- Developing asset tagging and labelling standards
- Building a master critical assets register with metadata fields
- Handling shared or dual-use assets (IT vs OT)
- Documenting technical justifications for asset inclusions
- Creating defensible exemption rationale for exclusions
- Process validation for auditor scrutiny
Module 3: Electronic Security Perimeter (ESP) Design - Defining the ESP boundary based on CIP-005
- Mapping network zones and conduits
- Differentiating between routable and non-routable protocols
- Defining unidirectional gateways and data diodes
- Establishing firewall rules and port control matrices
- Configuring ESP logging and alerting systems
- Handling remote access through ESP
- Validating ESP design with network diagrams
- Documenting ESP architecture for auditors
- Managing ESP exceptions with risk assessment
Module 4: Access Control & User Management - Defining authorised users and roles
- Implementing principle of least privilege
- Creating user onboarding and offboarding checklists
- Managing privileged access accounts (CIP-004)
- Applying multi-factor authentication (MFA) requirements
- Conducting user access reviews quarterly
- Documenting access revocation processes
- Tracking temporary access and emergency overrides
- Integrating with Active Directory or IAM systems
- Developing role-based access matrices
Module 5: Physical Security of Critical Assets - Establishing physical security boundaries (CIP-014)
- Defining protected cyber asset (PCA) locations
- Assessing physical threat models (theft, tampering, sabotage)
- Implementing access logs and visitor sign-in systems
- Deploying surveillance and intrusion detection systems
- Conducting physical security vulnerability assessments
- Managing shared facilities and third-party personnel
- Developing security incident response plans
- Documenting physical security controls for auditors
- Verifying annual physical inspections
Module 6: Cyber Security Policies & Program Documentation - Building a NERC CIP compliance policy suite
- Aligning policies with CIP-003 requirements
- Writing risk-based policy justifications
- Developing policy review and update cycles
- Assigning policy ownership to responsible roles
- Creating policy distribution and acknowledgement logs
- Integrating policies with corporate governance frameworks
- Mapping controls to specific standards clauses
- Building policy exception workflows
- Maintaining version control and audit trails
Module 7: Incident Response & Recovery Planning - Defining cyber security events vs incidents
- Establishing incident reporting timelines (CIP-008)
- Developing cyber security incident response plans (CSIRP)
- Designing escalation paths and notification protocols
- Conducting mandatory annual incident response training
- Documenting post-incident analysis and lessons learned
- Integrating with NERC’s incident reporting portal
- Testing response plans through tabletop exercises
- Recovering from ransomware and data exfiltration events
- Maintaining incident archives for six years
Module 8: Configuration Management & Change Control - Establishing secure configuration baselines (CIP-007)
- Documenting approved software and firmware versions
- Creating change request and approval workflows
- Implementing pre-change risk assessments
- Using change logs with timestamps and approvers
- Managing emergency changes with post-review requirements
- Verifying change rollback capabilities
- Conducting post-implementation reviews
- Aligning with patch management schedules
- Documenting exceptions to secure configurations
Module 9: Vulnerability Assessments & Patch Management - Scheduling semi-annual vulnerability assessments
- Selecting credentialed vs non-credentialed scanning tools
- Managing false positives and risk acceptance
- Assigning CVSS scores and prioritising remediation
- Developing patch deployment timelines by severity
- Handling obsolete systems that cannot be patched
- Using compensating controls for unpatchable systems
- Documenting patch validation procedures
- Coordinating patching with maintenance windows
- Maintaining six-year vulnerability assessment archives
Module 10: System Monitoring & Intrusion Detection - Deploying security information and event management (SIEM) systems
- Configuring alerts for suspicious login activity
- Setting thresholds for log review frequency
- Establishing log retention policies (15 months minimum)
- Securing log transfer and storage mechanisms
- Implementing centralised log aggregation
- Using IDS/IPS on critical network segments
- Conducting daily log review processes
- Documenting log review exceptions
- Integrating monitoring with ticketing systems
Module 11: Business Associate Agreements & Third-Party Risk - Identifying third parties with access to CCAs
- Drafting CIP-compliant vendor contracts
- Requiring documented compliance from service providers
- Conducting third-party risk assessments
- Managing remote vendor access securely
- Documenting third-party audit rights
- Enforcing compliance verification timelines
- Tracking third-party exception resolutions
- Handling subcontractor access chains
- Reviewing BAAs annually for renewal
Module 12: Personnel Training & Awareness Programs - Designing annual cyber security awareness training (CIP-004)
- Developing role-specific training modules
- Tracking completion through learning management systems
- Creating training content on phishing, social engineering, data handling
- Documenting training exceptions and deferrals
- Conducting knowledge verification assessments
- Using signed training acknowledgement forms
- Updating training content based on threat trends
- Integrating refresher modules for high-risk roles
- Maintaining six-year training record archives
Module 13: Recovery Plans for Cyber Assets - Identifying recovery time objectives (RTO) and recovery point objectives (RPO)
- Developing recovery plans for critical cyber assets (CIP-010)
- Documenting backup procedures and offsite storage
- Testing recovery plans through annual drills
- Validating data integrity after restoration
- Managing dependencies between recovery systems
- Ensuring recovery plan accessibility during outages
- Updating recovery plans after system changes
- Archiving recovery documentation for six years
- Integrating with organisational business continuity plans
Module 14: Supply Chain & Hardware Risk Management - Assessing cyber supply chain risks for OT equipment
- Validating vendor security practices pre-acquisition
- Requiring secure-by-design configurations
- Inspecting devices for tampering on arrival
- Using trusted sources for firmware and software
- Establishing secure staging environments
- Managing cryptographic key integrity
- Documenting supply chain risk mitigation
- Handling end-of-life and decommissioned equipment
- Conducting annual supply chain reviews
Module 15: Auditing & Self-Assessment Frameworks - Conducting internal compliance audits annually
- Using NERC’s Audit Worksheet templates
- Developing audit checklists by standard
- Performing gap assessments and remediation tracking
- Assigning corrective action owners
- Dating and archiving audit evidence
- Preparing staff for auditor interviews
- Simulating full compliance walkthroughs
- Building auditor response packages
- Establishing continuous compliance monitoring
Module 16: Documentation, Evidence Management & Recordkeeping - Structuring evidence repositories for easy retrieval
- Applying NERC’s evidence retention requirements (6 years)
- Using version-controlled documentation systems
- Organising records by CIP standard and sub-clause
- Digitising legacy paper records securely
- Protecting documentation from unauthorised access
- Creating audit-ready binders and digital folders
- Using metadata tagging for rapid search
- Maintaining independence of evidence reviewers
- Verifying record authenticity and integrity
Module 17: Real-World Implementation Projects - Building a compliance roadmap for your organisation
- Developing a 30-day execution plan
- Creating asset inventory spreadsheets with validation fields
- Drafting policy templates aligned with CIP-003
- Designing network diagrams for ESP validation
- Implementing user access review workflows
- Conducting a simulated vulnerability assessment
- Running a tabletop incident response exercise
- Documenting a physical security walkthrough
- Producing a maturity scorecard for leadership reporting
Module 18: Certification Preparation & Next Steps - Finalising your compliance portfolio submission
- Reviewing Certificate of Completion requirements
- Submitting completed projects for evaluation
- Receiving detailed feedback from compliance architects
- Addressing feedback and resubmitting if needed
- Receiving your verified Certificate of Completion
- Adding the credential to your LinkedIn profile
- Using the certification in internal promotions or job applications
- Accessing alumni resources and updates
- Joining the community of certified NERC CIP professionals
- Workflow for identifying BES facilities subject to CIP
- Defining function-based criteria for criticality assessment
- Applying the Loss of Load (LOL) and Stability Impact thresholds
- Using voltage levels and MVA thresholds for inclusion
- Developing asset tagging and labelling standards
- Building a master critical assets register with metadata fields
- Handling shared or dual-use assets (IT vs OT)
- Documenting technical justifications for asset inclusions
- Creating defensible exemption rationale for exclusions
- Process validation for auditor scrutiny
Module 3: Electronic Security Perimeter (ESP) Design - Defining the ESP boundary based on CIP-005
- Mapping network zones and conduits
- Differentiating between routable and non-routable protocols
- Defining unidirectional gateways and data diodes
- Establishing firewall rules and port control matrices
- Configuring ESP logging and alerting systems
- Handling remote access through ESP
- Validating ESP design with network diagrams
- Documenting ESP architecture for auditors
- Managing ESP exceptions with risk assessment
Module 4: Access Control & User Management - Defining authorised users and roles
- Implementing principle of least privilege
- Creating user onboarding and offboarding checklists
- Managing privileged access accounts (CIP-004)
- Applying multi-factor authentication (MFA) requirements
- Conducting user access reviews quarterly
- Documenting access revocation processes
- Tracking temporary access and emergency overrides
- Integrating with Active Directory or IAM systems
- Developing role-based access matrices
Module 5: Physical Security of Critical Assets - Establishing physical security boundaries (CIP-014)
- Defining protected cyber asset (PCA) locations
- Assessing physical threat models (theft, tampering, sabotage)
- Implementing access logs and visitor sign-in systems
- Deploying surveillance and intrusion detection systems
- Conducting physical security vulnerability assessments
- Managing shared facilities and third-party personnel
- Developing security incident response plans
- Documenting physical security controls for auditors
- Verifying annual physical inspections
Module 6: Cyber Security Policies & Program Documentation - Building a NERC CIP compliance policy suite
- Aligning policies with CIP-003 requirements
- Writing risk-based policy justifications
- Developing policy review and update cycles
- Assigning policy ownership to responsible roles
- Creating policy distribution and acknowledgement logs
- Integrating policies with corporate governance frameworks
- Mapping controls to specific standards clauses
- Building policy exception workflows
- Maintaining version control and audit trails
Module 7: Incident Response & Recovery Planning - Defining cyber security events vs incidents
- Establishing incident reporting timelines (CIP-008)
- Developing cyber security incident response plans (CSIRP)
- Designing escalation paths and notification protocols
- Conducting mandatory annual incident response training
- Documenting post-incident analysis and lessons learned
- Integrating with NERC’s incident reporting portal
- Testing response plans through tabletop exercises
- Recovering from ransomware and data exfiltration events
- Maintaining incident archives for six years
Module 8: Configuration Management & Change Control - Establishing secure configuration baselines (CIP-007)
- Documenting approved software and firmware versions
- Creating change request and approval workflows
- Implementing pre-change risk assessments
- Using change logs with timestamps and approvers
- Managing emergency changes with post-review requirements
- Verifying change rollback capabilities
- Conducting post-implementation reviews
- Aligning with patch management schedules
- Documenting exceptions to secure configurations
Module 9: Vulnerability Assessments & Patch Management - Scheduling semi-annual vulnerability assessments
- Selecting credentialed vs non-credentialed scanning tools
- Managing false positives and risk acceptance
- Assigning CVSS scores and prioritising remediation
- Developing patch deployment timelines by severity
- Handling obsolete systems that cannot be patched
- Using compensating controls for unpatchable systems
- Documenting patch validation procedures
- Coordinating patching with maintenance windows
- Maintaining six-year vulnerability assessment archives
Module 10: System Monitoring & Intrusion Detection - Deploying security information and event management (SIEM) systems
- Configuring alerts for suspicious login activity
- Setting thresholds for log review frequency
- Establishing log retention policies (15 months minimum)
- Securing log transfer and storage mechanisms
- Implementing centralised log aggregation
- Using IDS/IPS on critical network segments
- Conducting daily log review processes
- Documenting log review exceptions
- Integrating monitoring with ticketing systems
Module 11: Business Associate Agreements & Third-Party Risk - Identifying third parties with access to CCAs
- Drafting CIP-compliant vendor contracts
- Requiring documented compliance from service providers
- Conducting third-party risk assessments
- Managing remote vendor access securely
- Documenting third-party audit rights
- Enforcing compliance verification timelines
- Tracking third-party exception resolutions
- Handling subcontractor access chains
- Reviewing BAAs annually for renewal
Module 12: Personnel Training & Awareness Programs - Designing annual cyber security awareness training (CIP-004)
- Developing role-specific training modules
- Tracking completion through learning management systems
- Creating training content on phishing, social engineering, data handling
- Documenting training exceptions and deferrals
- Conducting knowledge verification assessments
- Using signed training acknowledgement forms
- Updating training content based on threat trends
- Integrating refresher modules for high-risk roles
- Maintaining six-year training record archives
Module 13: Recovery Plans for Cyber Assets - Identifying recovery time objectives (RTO) and recovery point objectives (RPO)
- Developing recovery plans for critical cyber assets (CIP-010)
- Documenting backup procedures and offsite storage
- Testing recovery plans through annual drills
- Validating data integrity after restoration
- Managing dependencies between recovery systems
- Ensuring recovery plan accessibility during outages
- Updating recovery plans after system changes
- Archiving recovery documentation for six years
- Integrating with organisational business continuity plans
Module 14: Supply Chain & Hardware Risk Management - Assessing cyber supply chain risks for OT equipment
- Validating vendor security practices pre-acquisition
- Requiring secure-by-design configurations
- Inspecting devices for tampering on arrival
- Using trusted sources for firmware and software
- Establishing secure staging environments
- Managing cryptographic key integrity
- Documenting supply chain risk mitigation
- Handling end-of-life and decommissioned equipment
- Conducting annual supply chain reviews
Module 15: Auditing & Self-Assessment Frameworks - Conducting internal compliance audits annually
- Using NERC’s Audit Worksheet templates
- Developing audit checklists by standard
- Performing gap assessments and remediation tracking
- Assigning corrective action owners
- Dating and archiving audit evidence
- Preparing staff for auditor interviews
- Simulating full compliance walkthroughs
- Building auditor response packages
- Establishing continuous compliance monitoring
Module 16: Documentation, Evidence Management & Recordkeeping - Structuring evidence repositories for easy retrieval
- Applying NERC’s evidence retention requirements (6 years)
- Using version-controlled documentation systems
- Organising records by CIP standard and sub-clause
- Digitising legacy paper records securely
- Protecting documentation from unauthorised access
- Creating audit-ready binders and digital folders
- Using metadata tagging for rapid search
- Maintaining independence of evidence reviewers
- Verifying record authenticity and integrity
Module 17: Real-World Implementation Projects - Building a compliance roadmap for your organisation
- Developing a 30-day execution plan
- Creating asset inventory spreadsheets with validation fields
- Drafting policy templates aligned with CIP-003
- Designing network diagrams for ESP validation
- Implementing user access review workflows
- Conducting a simulated vulnerability assessment
- Running a tabletop incident response exercise
- Documenting a physical security walkthrough
- Producing a maturity scorecard for leadership reporting
Module 18: Certification Preparation & Next Steps - Finalising your compliance portfolio submission
- Reviewing Certificate of Completion requirements
- Submitting completed projects for evaluation
- Receiving detailed feedback from compliance architects
- Addressing feedback and resubmitting if needed
- Receiving your verified Certificate of Completion
- Adding the credential to your LinkedIn profile
- Using the certification in internal promotions or job applications
- Accessing alumni resources and updates
- Joining the community of certified NERC CIP professionals
- Defining authorised users and roles
- Implementing principle of least privilege
- Creating user onboarding and offboarding checklists
- Managing privileged access accounts (CIP-004)
- Applying multi-factor authentication (MFA) requirements
- Conducting user access reviews quarterly
- Documenting access revocation processes
- Tracking temporary access and emergency overrides
- Integrating with Active Directory or IAM systems
- Developing role-based access matrices
Module 5: Physical Security of Critical Assets - Establishing physical security boundaries (CIP-014)
- Defining protected cyber asset (PCA) locations
- Assessing physical threat models (theft, tampering, sabotage)
- Implementing access logs and visitor sign-in systems
- Deploying surveillance and intrusion detection systems
- Conducting physical security vulnerability assessments
- Managing shared facilities and third-party personnel
- Developing security incident response plans
- Documenting physical security controls for auditors
- Verifying annual physical inspections
Module 6: Cyber Security Policies & Program Documentation - Building a NERC CIP compliance policy suite
- Aligning policies with CIP-003 requirements
- Writing risk-based policy justifications
- Developing policy review and update cycles
- Assigning policy ownership to responsible roles
- Creating policy distribution and acknowledgement logs
- Integrating policies with corporate governance frameworks
- Mapping controls to specific standards clauses
- Building policy exception workflows
- Maintaining version control and audit trails
Module 7: Incident Response & Recovery Planning - Defining cyber security events vs incidents
- Establishing incident reporting timelines (CIP-008)
- Developing cyber security incident response plans (CSIRP)
- Designing escalation paths and notification protocols
- Conducting mandatory annual incident response training
- Documenting post-incident analysis and lessons learned
- Integrating with NERC’s incident reporting portal
- Testing response plans through tabletop exercises
- Recovering from ransomware and data exfiltration events
- Maintaining incident archives for six years
Module 8: Configuration Management & Change Control - Establishing secure configuration baselines (CIP-007)
- Documenting approved software and firmware versions
- Creating change request and approval workflows
- Implementing pre-change risk assessments
- Using change logs with timestamps and approvers
- Managing emergency changes with post-review requirements
- Verifying change rollback capabilities
- Conducting post-implementation reviews
- Aligning with patch management schedules
- Documenting exceptions to secure configurations
Module 9: Vulnerability Assessments & Patch Management - Scheduling semi-annual vulnerability assessments
- Selecting credentialed vs non-credentialed scanning tools
- Managing false positives and risk acceptance
- Assigning CVSS scores and prioritising remediation
- Developing patch deployment timelines by severity
- Handling obsolete systems that cannot be patched
- Using compensating controls for unpatchable systems
- Documenting patch validation procedures
- Coordinating patching with maintenance windows
- Maintaining six-year vulnerability assessment archives
Module 10: System Monitoring & Intrusion Detection - Deploying security information and event management (SIEM) systems
- Configuring alerts for suspicious login activity
- Setting thresholds for log review frequency
- Establishing log retention policies (15 months minimum)
- Securing log transfer and storage mechanisms
- Implementing centralised log aggregation
- Using IDS/IPS on critical network segments
- Conducting daily log review processes
- Documenting log review exceptions
- Integrating monitoring with ticketing systems
Module 11: Business Associate Agreements & Third-Party Risk - Identifying third parties with access to CCAs
- Drafting CIP-compliant vendor contracts
- Requiring documented compliance from service providers
- Conducting third-party risk assessments
- Managing remote vendor access securely
- Documenting third-party audit rights
- Enforcing compliance verification timelines
- Tracking third-party exception resolutions
- Handling subcontractor access chains
- Reviewing BAAs annually for renewal
Module 12: Personnel Training & Awareness Programs - Designing annual cyber security awareness training (CIP-004)
- Developing role-specific training modules
- Tracking completion through learning management systems
- Creating training content on phishing, social engineering, data handling
- Documenting training exceptions and deferrals
- Conducting knowledge verification assessments
- Using signed training acknowledgement forms
- Updating training content based on threat trends
- Integrating refresher modules for high-risk roles
- Maintaining six-year training record archives
Module 13: Recovery Plans for Cyber Assets - Identifying recovery time objectives (RTO) and recovery point objectives (RPO)
- Developing recovery plans for critical cyber assets (CIP-010)
- Documenting backup procedures and offsite storage
- Testing recovery plans through annual drills
- Validating data integrity after restoration
- Managing dependencies between recovery systems
- Ensuring recovery plan accessibility during outages
- Updating recovery plans after system changes
- Archiving recovery documentation for six years
- Integrating with organisational business continuity plans
Module 14: Supply Chain & Hardware Risk Management - Assessing cyber supply chain risks for OT equipment
- Validating vendor security practices pre-acquisition
- Requiring secure-by-design configurations
- Inspecting devices for tampering on arrival
- Using trusted sources for firmware and software
- Establishing secure staging environments
- Managing cryptographic key integrity
- Documenting supply chain risk mitigation
- Handling end-of-life and decommissioned equipment
- Conducting annual supply chain reviews
Module 15: Auditing & Self-Assessment Frameworks - Conducting internal compliance audits annually
- Using NERC’s Audit Worksheet templates
- Developing audit checklists by standard
- Performing gap assessments and remediation tracking
- Assigning corrective action owners
- Dating and archiving audit evidence
- Preparing staff for auditor interviews
- Simulating full compliance walkthroughs
- Building auditor response packages
- Establishing continuous compliance monitoring
Module 16: Documentation, Evidence Management & Recordkeeping - Structuring evidence repositories for easy retrieval
- Applying NERC’s evidence retention requirements (6 years)
- Using version-controlled documentation systems
- Organising records by CIP standard and sub-clause
- Digitising legacy paper records securely
- Protecting documentation from unauthorised access
- Creating audit-ready binders and digital folders
- Using metadata tagging for rapid search
- Maintaining independence of evidence reviewers
- Verifying record authenticity and integrity
Module 17: Real-World Implementation Projects - Building a compliance roadmap for your organisation
- Developing a 30-day execution plan
- Creating asset inventory spreadsheets with validation fields
- Drafting policy templates aligned with CIP-003
- Designing network diagrams for ESP validation
- Implementing user access review workflows
- Conducting a simulated vulnerability assessment
- Running a tabletop incident response exercise
- Documenting a physical security walkthrough
- Producing a maturity scorecard for leadership reporting
Module 18: Certification Preparation & Next Steps - Finalising your compliance portfolio submission
- Reviewing Certificate of Completion requirements
- Submitting completed projects for evaluation
- Receiving detailed feedback from compliance architects
- Addressing feedback and resubmitting if needed
- Receiving your verified Certificate of Completion
- Adding the credential to your LinkedIn profile
- Using the certification in internal promotions or job applications
- Accessing alumni resources and updates
- Joining the community of certified NERC CIP professionals
- Building a NERC CIP compliance policy suite
- Aligning policies with CIP-003 requirements
- Writing risk-based policy justifications
- Developing policy review and update cycles
- Assigning policy ownership to responsible roles
- Creating policy distribution and acknowledgement logs
- Integrating policies with corporate governance frameworks
- Mapping controls to specific standards clauses
- Building policy exception workflows
- Maintaining version control and audit trails
Module 7: Incident Response & Recovery Planning - Defining cyber security events vs incidents
- Establishing incident reporting timelines (CIP-008)
- Developing cyber security incident response plans (CSIRP)
- Designing escalation paths and notification protocols
- Conducting mandatory annual incident response training
- Documenting post-incident analysis and lessons learned
- Integrating with NERC’s incident reporting portal
- Testing response plans through tabletop exercises
- Recovering from ransomware and data exfiltration events
- Maintaining incident archives for six years
Module 8: Configuration Management & Change Control - Establishing secure configuration baselines (CIP-007)
- Documenting approved software and firmware versions
- Creating change request and approval workflows
- Implementing pre-change risk assessments
- Using change logs with timestamps and approvers
- Managing emergency changes with post-review requirements
- Verifying change rollback capabilities
- Conducting post-implementation reviews
- Aligning with patch management schedules
- Documenting exceptions to secure configurations
Module 9: Vulnerability Assessments & Patch Management - Scheduling semi-annual vulnerability assessments
- Selecting credentialed vs non-credentialed scanning tools
- Managing false positives and risk acceptance
- Assigning CVSS scores and prioritising remediation
- Developing patch deployment timelines by severity
- Handling obsolete systems that cannot be patched
- Using compensating controls for unpatchable systems
- Documenting patch validation procedures
- Coordinating patching with maintenance windows
- Maintaining six-year vulnerability assessment archives
Module 10: System Monitoring & Intrusion Detection - Deploying security information and event management (SIEM) systems
- Configuring alerts for suspicious login activity
- Setting thresholds for log review frequency
- Establishing log retention policies (15 months minimum)
- Securing log transfer and storage mechanisms
- Implementing centralised log aggregation
- Using IDS/IPS on critical network segments
- Conducting daily log review processes
- Documenting log review exceptions
- Integrating monitoring with ticketing systems
Module 11: Business Associate Agreements & Third-Party Risk - Identifying third parties with access to CCAs
- Drafting CIP-compliant vendor contracts
- Requiring documented compliance from service providers
- Conducting third-party risk assessments
- Managing remote vendor access securely
- Documenting third-party audit rights
- Enforcing compliance verification timelines
- Tracking third-party exception resolutions
- Handling subcontractor access chains
- Reviewing BAAs annually for renewal
Module 12: Personnel Training & Awareness Programs - Designing annual cyber security awareness training (CIP-004)
- Developing role-specific training modules
- Tracking completion through learning management systems
- Creating training content on phishing, social engineering, data handling
- Documenting training exceptions and deferrals
- Conducting knowledge verification assessments
- Using signed training acknowledgement forms
- Updating training content based on threat trends
- Integrating refresher modules for high-risk roles
- Maintaining six-year training record archives
Module 13: Recovery Plans for Cyber Assets - Identifying recovery time objectives (RTO) and recovery point objectives (RPO)
- Developing recovery plans for critical cyber assets (CIP-010)
- Documenting backup procedures and offsite storage
- Testing recovery plans through annual drills
- Validating data integrity after restoration
- Managing dependencies between recovery systems
- Ensuring recovery plan accessibility during outages
- Updating recovery plans after system changes
- Archiving recovery documentation for six years
- Integrating with organisational business continuity plans
Module 14: Supply Chain & Hardware Risk Management - Assessing cyber supply chain risks for OT equipment
- Validating vendor security practices pre-acquisition
- Requiring secure-by-design configurations
- Inspecting devices for tampering on arrival
- Using trusted sources for firmware and software
- Establishing secure staging environments
- Managing cryptographic key integrity
- Documenting supply chain risk mitigation
- Handling end-of-life and decommissioned equipment
- Conducting annual supply chain reviews
Module 15: Auditing & Self-Assessment Frameworks - Conducting internal compliance audits annually
- Using NERC’s Audit Worksheet templates
- Developing audit checklists by standard
- Performing gap assessments and remediation tracking
- Assigning corrective action owners
- Dating and archiving audit evidence
- Preparing staff for auditor interviews
- Simulating full compliance walkthroughs
- Building auditor response packages
- Establishing continuous compliance monitoring
Module 16: Documentation, Evidence Management & Recordkeeping - Structuring evidence repositories for easy retrieval
- Applying NERC’s evidence retention requirements (6 years)
- Using version-controlled documentation systems
- Organising records by CIP standard and sub-clause
- Digitising legacy paper records securely
- Protecting documentation from unauthorised access
- Creating audit-ready binders and digital folders
- Using metadata tagging for rapid search
- Maintaining independence of evidence reviewers
- Verifying record authenticity and integrity
Module 17: Real-World Implementation Projects - Building a compliance roadmap for your organisation
- Developing a 30-day execution plan
- Creating asset inventory spreadsheets with validation fields
- Drafting policy templates aligned with CIP-003
- Designing network diagrams for ESP validation
- Implementing user access review workflows
- Conducting a simulated vulnerability assessment
- Running a tabletop incident response exercise
- Documenting a physical security walkthrough
- Producing a maturity scorecard for leadership reporting
Module 18: Certification Preparation & Next Steps - Finalising your compliance portfolio submission
- Reviewing Certificate of Completion requirements
- Submitting completed projects for evaluation
- Receiving detailed feedback from compliance architects
- Addressing feedback and resubmitting if needed
- Receiving your verified Certificate of Completion
- Adding the credential to your LinkedIn profile
- Using the certification in internal promotions or job applications
- Accessing alumni resources and updates
- Joining the community of certified NERC CIP professionals
- Establishing secure configuration baselines (CIP-007)
- Documenting approved software and firmware versions
- Creating change request and approval workflows
- Implementing pre-change risk assessments
- Using change logs with timestamps and approvers
- Managing emergency changes with post-review requirements
- Verifying change rollback capabilities
- Conducting post-implementation reviews
- Aligning with patch management schedules
- Documenting exceptions to secure configurations
Module 9: Vulnerability Assessments & Patch Management - Scheduling semi-annual vulnerability assessments
- Selecting credentialed vs non-credentialed scanning tools
- Managing false positives and risk acceptance
- Assigning CVSS scores and prioritising remediation
- Developing patch deployment timelines by severity
- Handling obsolete systems that cannot be patched
- Using compensating controls for unpatchable systems
- Documenting patch validation procedures
- Coordinating patching with maintenance windows
- Maintaining six-year vulnerability assessment archives
Module 10: System Monitoring & Intrusion Detection - Deploying security information and event management (SIEM) systems
- Configuring alerts for suspicious login activity
- Setting thresholds for log review frequency
- Establishing log retention policies (15 months minimum)
- Securing log transfer and storage mechanisms
- Implementing centralised log aggregation
- Using IDS/IPS on critical network segments
- Conducting daily log review processes
- Documenting log review exceptions
- Integrating monitoring with ticketing systems
Module 11: Business Associate Agreements & Third-Party Risk - Identifying third parties with access to CCAs
- Drafting CIP-compliant vendor contracts
- Requiring documented compliance from service providers
- Conducting third-party risk assessments
- Managing remote vendor access securely
- Documenting third-party audit rights
- Enforcing compliance verification timelines
- Tracking third-party exception resolutions
- Handling subcontractor access chains
- Reviewing BAAs annually for renewal
Module 12: Personnel Training & Awareness Programs - Designing annual cyber security awareness training (CIP-004)
- Developing role-specific training modules
- Tracking completion through learning management systems
- Creating training content on phishing, social engineering, data handling
- Documenting training exceptions and deferrals
- Conducting knowledge verification assessments
- Using signed training acknowledgement forms
- Updating training content based on threat trends
- Integrating refresher modules for high-risk roles
- Maintaining six-year training record archives
Module 13: Recovery Plans for Cyber Assets - Identifying recovery time objectives (RTO) and recovery point objectives (RPO)
- Developing recovery plans for critical cyber assets (CIP-010)
- Documenting backup procedures and offsite storage
- Testing recovery plans through annual drills
- Validating data integrity after restoration
- Managing dependencies between recovery systems
- Ensuring recovery plan accessibility during outages
- Updating recovery plans after system changes
- Archiving recovery documentation for six years
- Integrating with organisational business continuity plans
Module 14: Supply Chain & Hardware Risk Management - Assessing cyber supply chain risks for OT equipment
- Validating vendor security practices pre-acquisition
- Requiring secure-by-design configurations
- Inspecting devices for tampering on arrival
- Using trusted sources for firmware and software
- Establishing secure staging environments
- Managing cryptographic key integrity
- Documenting supply chain risk mitigation
- Handling end-of-life and decommissioned equipment
- Conducting annual supply chain reviews
Module 15: Auditing & Self-Assessment Frameworks - Conducting internal compliance audits annually
- Using NERC’s Audit Worksheet templates
- Developing audit checklists by standard
- Performing gap assessments and remediation tracking
- Assigning corrective action owners
- Dating and archiving audit evidence
- Preparing staff for auditor interviews
- Simulating full compliance walkthroughs
- Building auditor response packages
- Establishing continuous compliance monitoring
Module 16: Documentation, Evidence Management & Recordkeeping - Structuring evidence repositories for easy retrieval
- Applying NERC’s evidence retention requirements (6 years)
- Using version-controlled documentation systems
- Organising records by CIP standard and sub-clause
- Digitising legacy paper records securely
- Protecting documentation from unauthorised access
- Creating audit-ready binders and digital folders
- Using metadata tagging for rapid search
- Maintaining independence of evidence reviewers
- Verifying record authenticity and integrity
Module 17: Real-World Implementation Projects - Building a compliance roadmap for your organisation
- Developing a 30-day execution plan
- Creating asset inventory spreadsheets with validation fields
- Drafting policy templates aligned with CIP-003
- Designing network diagrams for ESP validation
- Implementing user access review workflows
- Conducting a simulated vulnerability assessment
- Running a tabletop incident response exercise
- Documenting a physical security walkthrough
- Producing a maturity scorecard for leadership reporting
Module 18: Certification Preparation & Next Steps - Finalising your compliance portfolio submission
- Reviewing Certificate of Completion requirements
- Submitting completed projects for evaluation
- Receiving detailed feedback from compliance architects
- Addressing feedback and resubmitting if needed
- Receiving your verified Certificate of Completion
- Adding the credential to your LinkedIn profile
- Using the certification in internal promotions or job applications
- Accessing alumni resources and updates
- Joining the community of certified NERC CIP professionals
- Deploying security information and event management (SIEM) systems
- Configuring alerts for suspicious login activity
- Setting thresholds for log review frequency
- Establishing log retention policies (15 months minimum)
- Securing log transfer and storage mechanisms
- Implementing centralised log aggregation
- Using IDS/IPS on critical network segments
- Conducting daily log review processes
- Documenting log review exceptions
- Integrating monitoring with ticketing systems
Module 11: Business Associate Agreements & Third-Party Risk - Identifying third parties with access to CCAs
- Drafting CIP-compliant vendor contracts
- Requiring documented compliance from service providers
- Conducting third-party risk assessments
- Managing remote vendor access securely
- Documenting third-party audit rights
- Enforcing compliance verification timelines
- Tracking third-party exception resolutions
- Handling subcontractor access chains
- Reviewing BAAs annually for renewal
Module 12: Personnel Training & Awareness Programs - Designing annual cyber security awareness training (CIP-004)
- Developing role-specific training modules
- Tracking completion through learning management systems
- Creating training content on phishing, social engineering, data handling
- Documenting training exceptions and deferrals
- Conducting knowledge verification assessments
- Using signed training acknowledgement forms
- Updating training content based on threat trends
- Integrating refresher modules for high-risk roles
- Maintaining six-year training record archives
Module 13: Recovery Plans for Cyber Assets - Identifying recovery time objectives (RTO) and recovery point objectives (RPO)
- Developing recovery plans for critical cyber assets (CIP-010)
- Documenting backup procedures and offsite storage
- Testing recovery plans through annual drills
- Validating data integrity after restoration
- Managing dependencies between recovery systems
- Ensuring recovery plan accessibility during outages
- Updating recovery plans after system changes
- Archiving recovery documentation for six years
- Integrating with organisational business continuity plans
Module 14: Supply Chain & Hardware Risk Management - Assessing cyber supply chain risks for OT equipment
- Validating vendor security practices pre-acquisition
- Requiring secure-by-design configurations
- Inspecting devices for tampering on arrival
- Using trusted sources for firmware and software
- Establishing secure staging environments
- Managing cryptographic key integrity
- Documenting supply chain risk mitigation
- Handling end-of-life and decommissioned equipment
- Conducting annual supply chain reviews
Module 15: Auditing & Self-Assessment Frameworks - Conducting internal compliance audits annually
- Using NERC’s Audit Worksheet templates
- Developing audit checklists by standard
- Performing gap assessments and remediation tracking
- Assigning corrective action owners
- Dating and archiving audit evidence
- Preparing staff for auditor interviews
- Simulating full compliance walkthroughs
- Building auditor response packages
- Establishing continuous compliance monitoring
Module 16: Documentation, Evidence Management & Recordkeeping - Structuring evidence repositories for easy retrieval
- Applying NERC’s evidence retention requirements (6 years)
- Using version-controlled documentation systems
- Organising records by CIP standard and sub-clause
- Digitising legacy paper records securely
- Protecting documentation from unauthorised access
- Creating audit-ready binders and digital folders
- Using metadata tagging for rapid search
- Maintaining independence of evidence reviewers
- Verifying record authenticity and integrity
Module 17: Real-World Implementation Projects - Building a compliance roadmap for your organisation
- Developing a 30-day execution plan
- Creating asset inventory spreadsheets with validation fields
- Drafting policy templates aligned with CIP-003
- Designing network diagrams for ESP validation
- Implementing user access review workflows
- Conducting a simulated vulnerability assessment
- Running a tabletop incident response exercise
- Documenting a physical security walkthrough
- Producing a maturity scorecard for leadership reporting
Module 18: Certification Preparation & Next Steps - Finalising your compliance portfolio submission
- Reviewing Certificate of Completion requirements
- Submitting completed projects for evaluation
- Receiving detailed feedback from compliance architects
- Addressing feedback and resubmitting if needed
- Receiving your verified Certificate of Completion
- Adding the credential to your LinkedIn profile
- Using the certification in internal promotions or job applications
- Accessing alumni resources and updates
- Joining the community of certified NERC CIP professionals
- Designing annual cyber security awareness training (CIP-004)
- Developing role-specific training modules
- Tracking completion through learning management systems
- Creating training content on phishing, social engineering, data handling
- Documenting training exceptions and deferrals
- Conducting knowledge verification assessments
- Using signed training acknowledgement forms
- Updating training content based on threat trends
- Integrating refresher modules for high-risk roles
- Maintaining six-year training record archives
Module 13: Recovery Plans for Cyber Assets - Identifying recovery time objectives (RTO) and recovery point objectives (RPO)
- Developing recovery plans for critical cyber assets (CIP-010)
- Documenting backup procedures and offsite storage
- Testing recovery plans through annual drills
- Validating data integrity after restoration
- Managing dependencies between recovery systems
- Ensuring recovery plan accessibility during outages
- Updating recovery plans after system changes
- Archiving recovery documentation for six years
- Integrating with organisational business continuity plans
Module 14: Supply Chain & Hardware Risk Management - Assessing cyber supply chain risks for OT equipment
- Validating vendor security practices pre-acquisition
- Requiring secure-by-design configurations
- Inspecting devices for tampering on arrival
- Using trusted sources for firmware and software
- Establishing secure staging environments
- Managing cryptographic key integrity
- Documenting supply chain risk mitigation
- Handling end-of-life and decommissioned equipment
- Conducting annual supply chain reviews
Module 15: Auditing & Self-Assessment Frameworks - Conducting internal compliance audits annually
- Using NERC’s Audit Worksheet templates
- Developing audit checklists by standard
- Performing gap assessments and remediation tracking
- Assigning corrective action owners
- Dating and archiving audit evidence
- Preparing staff for auditor interviews
- Simulating full compliance walkthroughs
- Building auditor response packages
- Establishing continuous compliance monitoring
Module 16: Documentation, Evidence Management & Recordkeeping - Structuring evidence repositories for easy retrieval
- Applying NERC’s evidence retention requirements (6 years)
- Using version-controlled documentation systems
- Organising records by CIP standard and sub-clause
- Digitising legacy paper records securely
- Protecting documentation from unauthorised access
- Creating audit-ready binders and digital folders
- Using metadata tagging for rapid search
- Maintaining independence of evidence reviewers
- Verifying record authenticity and integrity
Module 17: Real-World Implementation Projects - Building a compliance roadmap for your organisation
- Developing a 30-day execution plan
- Creating asset inventory spreadsheets with validation fields
- Drafting policy templates aligned with CIP-003
- Designing network diagrams for ESP validation
- Implementing user access review workflows
- Conducting a simulated vulnerability assessment
- Running a tabletop incident response exercise
- Documenting a physical security walkthrough
- Producing a maturity scorecard for leadership reporting
Module 18: Certification Preparation & Next Steps - Finalising your compliance portfolio submission
- Reviewing Certificate of Completion requirements
- Submitting completed projects for evaluation
- Receiving detailed feedback from compliance architects
- Addressing feedback and resubmitting if needed
- Receiving your verified Certificate of Completion
- Adding the credential to your LinkedIn profile
- Using the certification in internal promotions or job applications
- Accessing alumni resources and updates
- Joining the community of certified NERC CIP professionals
- Assessing cyber supply chain risks for OT equipment
- Validating vendor security practices pre-acquisition
- Requiring secure-by-design configurations
- Inspecting devices for tampering on arrival
- Using trusted sources for firmware and software
- Establishing secure staging environments
- Managing cryptographic key integrity
- Documenting supply chain risk mitigation
- Handling end-of-life and decommissioned equipment
- Conducting annual supply chain reviews
Module 15: Auditing & Self-Assessment Frameworks - Conducting internal compliance audits annually
- Using NERC’s Audit Worksheet templates
- Developing audit checklists by standard
- Performing gap assessments and remediation tracking
- Assigning corrective action owners
- Dating and archiving audit evidence
- Preparing staff for auditor interviews
- Simulating full compliance walkthroughs
- Building auditor response packages
- Establishing continuous compliance monitoring
Module 16: Documentation, Evidence Management & Recordkeeping - Structuring evidence repositories for easy retrieval
- Applying NERC’s evidence retention requirements (6 years)
- Using version-controlled documentation systems
- Organising records by CIP standard and sub-clause
- Digitising legacy paper records securely
- Protecting documentation from unauthorised access
- Creating audit-ready binders and digital folders
- Using metadata tagging for rapid search
- Maintaining independence of evidence reviewers
- Verifying record authenticity and integrity
Module 17: Real-World Implementation Projects - Building a compliance roadmap for your organisation
- Developing a 30-day execution plan
- Creating asset inventory spreadsheets with validation fields
- Drafting policy templates aligned with CIP-003
- Designing network diagrams for ESP validation
- Implementing user access review workflows
- Conducting a simulated vulnerability assessment
- Running a tabletop incident response exercise
- Documenting a physical security walkthrough
- Producing a maturity scorecard for leadership reporting
Module 18: Certification Preparation & Next Steps - Finalising your compliance portfolio submission
- Reviewing Certificate of Completion requirements
- Submitting completed projects for evaluation
- Receiving detailed feedback from compliance architects
- Addressing feedback and resubmitting if needed
- Receiving your verified Certificate of Completion
- Adding the credential to your LinkedIn profile
- Using the certification in internal promotions or job applications
- Accessing alumni resources and updates
- Joining the community of certified NERC CIP professionals
- Structuring evidence repositories for easy retrieval
- Applying NERC’s evidence retention requirements (6 years)
- Using version-controlled documentation systems
- Organising records by CIP standard and sub-clause
- Digitising legacy paper records securely
- Protecting documentation from unauthorised access
- Creating audit-ready binders and digital folders
- Using metadata tagging for rapid search
- Maintaining independence of evidence reviewers
- Verifying record authenticity and integrity
Module 17: Real-World Implementation Projects - Building a compliance roadmap for your organisation
- Developing a 30-day execution plan
- Creating asset inventory spreadsheets with validation fields
- Drafting policy templates aligned with CIP-003
- Designing network diagrams for ESP validation
- Implementing user access review workflows
- Conducting a simulated vulnerability assessment
- Running a tabletop incident response exercise
- Documenting a physical security walkthrough
- Producing a maturity scorecard for leadership reporting
Module 18: Certification Preparation & Next Steps - Finalising your compliance portfolio submission
- Reviewing Certificate of Completion requirements
- Submitting completed projects for evaluation
- Receiving detailed feedback from compliance architects
- Addressing feedback and resubmitting if needed
- Receiving your verified Certificate of Completion
- Adding the credential to your LinkedIn profile
- Using the certification in internal promotions or job applications
- Accessing alumni resources and updates
- Joining the community of certified NERC CIP professionals
- Finalising your compliance portfolio submission
- Reviewing Certificate of Completion requirements
- Submitting completed projects for evaluation
- Receiving detailed feedback from compliance architects
- Addressing feedback and resubmitting if needed
- Receiving your verified Certificate of Completion
- Adding the credential to your LinkedIn profile
- Using the certification in internal promotions or job applications
- Accessing alumni resources and updates
- Joining the community of certified NERC CIP professionals