CIP version 4 background and impact-large utility perspective

This paper discusses about CIP Version 4. Compliance with NERC Critical Infrastructure Protection (CIP) standards has become an ever increasingly complex and time consuming task for the responsibility entities subject to the requirements in the CIP standards. Existing staff workload for those tasked with monitoring, documenting and carrying out the compliance efforts have increased dramatically. Staff necessary to handle the administrative efforts associated with tracking documentation, audit preparation, self-assessment, periodic review of policies and procedures, etc. have increased as well. Most medium to large utilities in particular have found it necessary to add "CIP Compliance" staff and even a whole department to handle the increase in workload.