This SANS white paper explains how electric utilities can deploy OT network visibility and detective controls while maintaining NERC CIP compliance. It evaluates the Dragos Platform, Sensors, and SiteStore against requirements spanning asset identification, malicious communications detection, logging, patching, authentication, recovery, configuration management, vulnerability assessment, and protection of BES Cyber System Information. The paper emphasizes that no technology is inherently compliant; compliance depends on configuration, evidence, processes, and lifecycle maintenance. It also addresses forthcoming internal network security monitoring requirements, CIP-015, and FERC Order 893, while encouraging utilities to choose sustainable technology partners that support operational reliab

Join for free to read