A few months back we hosted a webinar on the importance of Change Control Management for NERC CIP 002-009 compliance. Our knowledgeable host, Jeff Sherwood, put together a presentation highlighting his insights from many years as a cyber security consultant, specifically in the energy industry. Jeff posed five really good questions to ask yourself about the security of your company.
- Who should have access to what?
- Who does have access to what?
- Who could have access to what?
- Who did have access to what?
- Can we sustain our primary mission if everything fails?