Skip to content
SERVICES
NERC CIP Compliance
Program Development
Gap Analysis
RSAW/ERT Development
Audit Preparation
Mock Audit
Remediation Services
Vulnerability Assessment
CIP-013 Supply Chain
Internal Controls
Tabletop Exercise
Technical Documentation
Training
Information + Cyber Security
Policy + Procedure
Security Assessment
Penetration Testing
Application Security Assessment
Secure Network Design
Security Implementation
Risk + Regulatory Solutions
FERC D2SI
TSA Pipeline
NIST Guidelines
ISO 27001
CASE STUDIES
LIBRARY
COMPANY
About Us
Our Team
CONTACT US
Services
NERC CIP Compliance
NERC CIP Compliance
Program Development
Gap Analysis
RSAW/ERT Development
Audit Preparation
Mock Audit
Remediation Services
Vulnerability Assessment
CIP-013 Supply Chain
Internal Controls
Tabletop Exercise
Technical Documentation
Training
Information + Cyber Security
Information + Cyber Security
Policy + Procedure
Security Assessment
Penetration Testing
Application Security Assessment
Secure Network Design
Security Implementation
Risk + Regulatory Solutions
Risk + Regulatory Solutions
FERC D2SI
TSA Pipeline
NIST Guidelines
ISO 27001
Case Studies
Library
Company
About Us
Our Team
Contact us
case studies
CIP Happens.
Here are a few stories to help you picture how we can help when it does.
Ground-Up and Upkeep
An organization with a large fleet of low impact Generating Plants needed help assessing the security of their facilities. Since then, we’ve helped to build multiple programs and continue to provide ongoing support.
VAs and Patch Assessments
A large TO comprised of multiple independent operating companies needed help performing an annual Paper Vulnerability Assessment for their medium impact Substations. Since then, we’ve stood by their side year after year to perform this important annual check and more.
Vulnerability Assessments as an Internal Control
A small municipal utility needed help preparing for an audit in 2013. Since then, we’ve maintained a long-standing relationship between program development and annual CIP-010 VAs.
Vendor Risk Assessment Questionnaire
A BES vendor received a CIP-013 Supply Chain Risk Management questionnaire. We assessed their cyber security program and helped them to define a plan to improve the quality of their responses.
Turning a New Leaf
A large rural cooperative had just finished an audit. They asked NST for a gap assessment, turning into a large-scale documentation overhaul before their next audit.
Vendor Remote Access
A large GO with many low impact renewable sites and a medium impact Control Center needed help bridging the gap between compliance and IT. NST has partnered with this Entity on various projects throughout their program since this initial engagement.
Teaching an SME to CIP
A large GO with medium impact Assets in multiple NERC Regions struggled to keep up with day-to-day compliance activities. NST worked with this organization to get them back on track, and the relationship continues to this day.
In-Depth Network Review
A large, multi-state energy provider operating a diverse mix of transmission, gas, and LNG assets across the Northeast was looking to implement a new tool to improve network visibility. NST supported them through every step of the way.
Audit Prep + Paper and Active VAs
Following a successful audit prep engagement, NST was invited to perform a CVA. This contract has been extended annually for six additional years.
Fully Embedded NERC CIP Support
A mid-size transmission and distribution utility needed their program assessed against the newly released v1 NERC CIP Standards. Since then, NST has been involved both in and on the CIP program provide SMEs with day-to-day support, guidance, and resource flexibility.
Rapid Low Impact Program Development
A “Control Center for hire” needed a complete low impact CIP program right away, and a medium impact CIP program in 18 months! NST assisted in the full-scale development of this Entity’s program within the year!
Audit Support and Staff Augmentation
An MRO Entity with a large footprint needed help preparing for audit. We’ve since become engrained into their program and held their hand through the years.
NERC CIP Training Development
An Entity with a solid culture of compliance requested NST to produce a series of customized NERC CIP training modules for its workforce supporting its Control Centers.
Internal Controls and Overall CIP Support
A public utility district in the WECC Region hired NST for internal controls development. NST has since supported the client through audit preparation and various system upgrades which have impacted their CIP compliance program.
Cross-Standard Mapping
Many entities struggle with adhering to multiple regulatory frameworks at once. NST has helped to develop and refine unified programs to ease compliance burdens.
A Decade of Comprehensive NERC CIP Support
A large transmission utility in the NPCC region partnered with us for a Vulnerability Assessment (VA) in 2014. This initial engagement has evolved into a decade-long collaboration, spanning multiple critical projects and continuous support.
Comprehensive Firewall Ruleset Review
A large Regional Transmission Organization requested a program review, sparking a comprehensive review of firewall rules and configurations.
Vulnerability and Compliance Assessments
A large Transmission Owner/Operator in the Northeast needed us to complete vulnerability and compliance assessments. The nature of these assessments has changed as NERC CIP has changed from v1 to v3 to v5+, and NST has supported each version along the way.
Program and Policy Development
A large gas and electric utility, who’s been with NST since 2003, has used NST for a diverse set of projects to improve their security, reliability, and compliance with both NERC CIP and the TSA Pipeline Security Directive.
Program Overhaul and Support
In early 2021, an NPCC Generation Owner/Operator called upon NST to support the conversion from low to medium impact in response to a notification letter from ISO.
Full Scale Program Integration and Development
A large, multi-state, multi-region transmission company that NST has worked with since day 1. We've touched every part of this CIP program, and continue to support them to this day.
Internal Controls and CIP-013 Support
A large investor-owned generation and transmission entity in WECC wanted their internal controls locked and loaded before their next audit. Plus, CIP-013 was on the horizon. NST led both projects simultaneously.
Gap Assessment and Audit Support
A Gap Assessment led to a full internal controls development project with a large investor-owned utility serving the NY Metro Region.
Mock Audit / Compliance Support
A large investor owned utility with transmission and generation facilities in SERC needed to prepare for an audit. They called us.
CIP Program Development
A medium impact coal-fired generation plant in ReliabilityFirst needed to build a CIP program in the early days of CIP. We've helped build and maintain it from v3 to v5, and beyond.
The Original
NERC CIP Team
We'd love to have you in our circle.
Finger, meet button.
CONTACT US