scope:

The standard defines the functions and features to be provided in substation intelligent electronic devices (IEDs) to accommodate critical infrastructure protection (CIP) programs. The standard addresses security regarding the access, operation, configuration, firmware revision, and data retrieval from an IED. Encryption for the secure transmission of data both within and external to the substation is not part of this standard as this is addressed in other efforts.

Purpose

The standard defines the functions and features to be provided in substation IEDs to accommodate CIP programs. Specifically, the standard states which safeguards, audit mechanisms, and alarm indications shall be provided by the vendor of the IED with regard to all activities associated with access, operation, configuration, firmware revision, and data retrieval from an IED. The standard also allows the user to define a security program around these features, and alert the user if an IED does not meet this standard as to the need for other defensive measures (technical and/or procedural) that may need to be taken. The encryption for the secure transmission of data both within and external to the substation is not part of this standard as this is addressed in other efforts.