Go Back

CIP-004-AB-7 & CIP-011-AB-3

Consultation has concluded

Decision Issued

On March 14, 2024, the AESO forwarded a Forwarding Notice with the Alberta Utilities Commission (AUC) requesting approval of the proposed new CIP-004-AB-7, CIP-011-AB-3, AND CIP-PLAN-AB-3, and retirement of existing CIP-004-AB-5.1, CIP-011-AB-1, and CIP-PLAN-AB-2 (CIP-004-AB-7 & CIP-011-AB-3).

In Decision 28903-D01-2024, dated May 2, 2024, the AUC approved adoption of proposed new CIP-004-AB-7 & CIP-011-AB-3. 

CIP-004-AB-7 & CIP-011-AB-3 will become effective on April 1, 2026. Early compliance with CIP-004-AB-7 and CIP-011-AB-3 is available as set out in CIP-PLAN-AB-3. 

Background

The AESO consulted with Stakeholders on CIP-004-AB-7 and CIP-011-AB-3 (adoption of CIP-004-AB-7, CIP-011-AB-3, and CIP-PLAN-AB-2 and the retirement of existing CIP-004-AB-5.1, CIP-011-AB-1, and CIP-PLAN-AB-2) which are focused on addressing new cyber security challenges facing the Alberta Interconnected Electric System (AIES). 

The purpose of CIP-004-AB-7 is to minimize BES Cyber Systems' risk from unauthorized access by requiring personnel risk assessment, training, and security awareness to protect the Bulk Electric System (BES) against compromise, misoperation, or instability.

CIP-011-AB-3 aims to safeguard BES Cyber System Information (BCSI) by specifying protection requirements, ensuring the security of BES Cyber Systems against compromise that could affect BES stability and operation.

Decision Issued

On March 14, 2024, the AESO forwarded a Forwarding Notice with the Alberta Utilities Commission (AUC) requesting approval of the proposed new CIP-004-AB-7, CIP-011-AB-3, AND CIP-PLAN-AB-3, and retirement of existing CIP-004-AB-5.1, CIP-011-AB-1, and CIP-PLAN-AB-2 (CIP-004-AB-7 & CIP-011-AB-3).

In Decision 28903-D01-2024, dated May 2, 2024, the AUC approved adoption of proposed new CIP-004-AB-7 & CIP-011-AB-3. 

CIP-004-AB-7 & CIP-011-AB-3 will become effective on April 1, 2026. Early compliance with CIP-004-AB-7 and CIP-011-AB-3 is available as set out in CIP-PLAN-AB-3. 

Background

The AESO consulted with Stakeholders on CIP-004-AB-7 and CIP-011-AB-3 (adoption of CIP-004-AB-7, CIP-011-AB-3, and CIP-PLAN-AB-2 and the retirement of existing CIP-004-AB-5.1, CIP-011-AB-1, and CIP-PLAN-AB-2) which are focused on addressing new cyber security challenges facing the Alberta Interconnected Electric System (AIES). 

The purpose of CIP-004-AB-7 is to minimize BES Cyber Systems' risk from unauthorized access by requiring personnel risk assessment, training, and security awareness to protect the Bulk Electric System (BES) against compromise, misoperation, or instability.

CIP-011-AB-3 aims to safeguard BES Cyber System Information (BCSI) by specifying protection requirements, ensuring the security of BES Cyber Systems against compromise that could affect BES stability and operation.

Consultation has concluded

  • AESO Reply Letter | February 22, 2024

    CLOSED: This discussion has concluded.

    Purpose

    On December 21, 2023, the AESO issued a consultation letter regarding proposed CIP-004-AB-7 & CIP-011-AB-3 and requested Stakeholder comments on the same. For additional information, please see the Consultation Letter.

    AESO Reply to Stakeholders

    On January 31, 2024, the AESO posted written Stakeholder comments received regarding CIP-004-AB-7, CIP-011-AB-3, CIP-PLAN-AB-3, draft amended AESO ID #2015-003RS, Guidance Information for CIP Standards (“ID #2015-003RS”), and the related Reliability Standard Audit Worksheets.

    AESO Reply Letter Materials

    Can be found in the AESO Materials section.

  • Written Consultation 2 | December 21, 2023 - January 24, 2024

    CLOSED: This discussion has concluded.

    Purpose

    The AESO is seeking a second round of comments from stakeholders on the drafts of CIP-004-AB-7 and CIP-011-AB-3 to understand to key questions and concerns relating to reliability standard content, implementation or compliance. For additional information, please see the Consultation Letter.

    Request for Feedback

    The AESO values stakeholder input and invites all interested stakeholders to provide their feedback on CIP-004-AB-7 and CIP-011-AB-3 via the following Stakeholder Feedback Survey on or before January 24, 2024. Please be as specific as possible with your responses. Thank you for your input.

    Written Consultation materials

    Can be found in the AESO Materials section.

  • Reliability Standards Workshop | November 28, 2023

    CLOSED: This discussion has concluded.

    Purpose

    The purpose of the session is to engage stakeholders in discussions on CIP-004-AB-7 and CIP-011-AB-3 and the retirement of CIP-004-AB-5.1 and CIP-011-AB-1. Session objectives include addressing Stakeholder questions and concerns on CIP-004-AB-7 and CIP-011-AB-3 related to:

    • Updates to Standard requirements between CIP-004-AB-5.1 to CIP-004-AB-7 and CIP-011-AB-1 to CIP-011-AB-3;
    • Draft Reliability Standard Audit Worksheets; and
    • Effective dates and Early Compliance options.
    • Open Discussion on Methods to Mitigate Confidentiality Risk

    RSW Materials

    Can be found in the AESO Materials Section

  • Written Consultation | September 26 - October 17, 2023

    CLOSED: This discussion has concluded.

    Purpose

    The AESO is seeking an initial round of comments from stakeholders on the drafts of CIP-004-AB-7 and CIP-011-AB-3 to understand to key questions and concerns relating to reliability standard content, implementation or compliance. For additional information, please see the Consultation Letter.

    Request for Feedback

    Thank you to all Stakeholders who participated in this consultation.

    Written Consultation materials

    Can be found in the AESO Materials section.