NERC CIP Compliance with Tripwire and NovaTech

Tripwire solutions protect sensitive data and assets from breaches, vulnerabilities, and threats while delivering risk visibility, business context and security business intelligence. The integration between Tripwire and Novatech’s NERC CIP Password, Configuration and Remote Access Management solution brings a consistent approach to the management, auditing and maintenance of secure configurations across a wide range of devices, including ICS and SCADA devices used in substations.

Business and Technical Challenges

NERC CIP compliance doesn’t have to be overwhelming but it needs to be addressed seriously. The Federal Energy Regulatory Commission (FERC) updates the Critical Infrastructure Protection (CIP) standards on a regular basis. Tripwire has been doing NERC CIP compliance since the standard emerged, and applying our products and our deep domain expertise in compliance as well as security has helped hundreds of electric utilities achieve, maintain and produce “evidence of compliance” for their NERC audits.

The Joint Solution

The integration between the Tripwire NERC Solution Suite and the NovaTech Orion Substation Automation Platform provides mutual energy customers with automation software that drastically reduces the time and resources required to manage secure configurations and collect audit evidence for NERC CIP compliance. The Tripwire NERC CIP Solution Suite is built on our award-winning and patented technology, dramatically reducing the time and effort for power and utility companies to pass their audits. NovaTech provides CIP-compliant Remote Access and Administration of IEDs, including Password and Connections Management. Solutions include role-based authentication, centralized authentication, secure access to substation assets and automatic password changing. Their complete compliance solutions include partner products for Inventory, Configuration Management, Change Control, Event Logging and CIP Reporting for substation assets, tailored to meet the latest NERC CIP v5 requirements.