Computerized System for Complying with Certain Critical Infrastructure Protection Requirements
AssigneeHoosier Energy Rural Electric Cooperative, Inc.
InventorsPaul Tyler Bonney, Richard Ray Field
Life of this patent
Estimating the term…
Abstract
A computerized system for complying with critical infrastructure protection (“CIP”) standards concerning system configuration changes. The system can be used to automatically identify and track changes to computers on the network, improving system security and CIP compliance reporting. In certain embodiments, the system collects system information on servers and workstations using built-in commands. The configuration profiles of these computers/devices can be archived for audit purposes.
Claims8
A computerized system of complying with certain critical infrastructure protection requirements, the method comprising:
- means for collecting system information by communicating with a plurality of devices over an electronic communications network to execute a plurality of command line operations on the plurality of devices, wherein the command line operations are selected to target extraction of profile elements based on one or more critical infrastructure protection (“CIP”) standards in one or more of the following:
- CIP-003 R6, CIP-007 R1, CIP-007 R2, CIP-007 R3, CIP-007 R4, and/or CIP-007 R5;
- means for comparing the collected system information for the plurality of devices with baseline system configurations to determine whether any changes have been made that could indicate a potential threat, wherein the means for collecting system information sets the collected system information as the baseline system configurations for the plurality of devices based on a determination that no changes have been made that could indicate a potential threat;
- and
- wherein in response to a determination that one or more changes have been made that could indicate a potential threat, remediating one or more items that could indicate the potential threat.
Dependencies are inferred from the claim text.