[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nerc-cip\u002Fcip-007":3},{"item":4,"lessons":16,"controls":66,"related":97},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nerc-cip","cip-007","CIP-007-6","CIP-007: Systems Security Management",119,"North American Electric Reliability Corporation (NERC)","**What it asks for.** CIP-007 is a NERC Critical Infrastructure Protection standard for the North American bulk electric system. It requires responsible entities to manage the security of in-scope BES Cyber Systems through controls on ports and services, security patch management, malicious code prevention, security event monitoring and system access control, including password and authentication requirements.\n\n**In practice.** Entities document enabled ports and services, evaluate security patches on a regular cycle and track mitigation plans, deploy methods to deter and detect malicious code, log and alert on security events and manage shared and default accounts. Evidence for audit includes configuration listings, patch evaluation records, log retention records and account management documentation.\n\n**Common gaps.** Patch evaluation records and mitigation plans often lag behind the required cycle. Default and shared accounts on field devices are another frequent source of findings.",null,"https:\u002F\u002Fwww.nerc.com\u002Fpa\u002FStand\u002FPages\u002FReliabilityStandards.aspx","See the NERC standards","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"ai-compromises-robotic-arm-in-16-minutes-exposing-ot-security-gaps","AI Compromises Robotic Arm in 16 Minutes, Exposing OT Security Gaps","2026-10-16T20:20:16.394+00:00",{"slug":23,"title":24,"published_at":25},"multiple-critical-vulnerabilities-found-in-cisa-malcolm-network-traffic-analyzer","Multiple Critical Vulnerabilities Found in CISA Malcolm Network Traffic Analyzer","2026-10-15T18:22:08.348+00:00",{"slug":27,"title":28,"published_at":29},"ivanti-ics-zero-day-exposes-vendor-patching-gaps-in-critical-infrastructure","Ivanti ICS Zero-Day Exposes Vendor Patching Gaps in Critical Infrastructure","2026-10-14T22:20:35.194+00:00",{"slug":31,"title":32,"published_at":33},"ai-agents-can-compromise-ot-systems-and-move-physical-equipment-in-under-17-minutes","AI Agents Can Compromise OT Systems and Move Physical Equipment in Under 17 Minutes","2026-10-14T18:21:46.77+00:00",{"slug":35,"title":36,"published_at":37},"critical-ics-vulnerabilities-demand-urgent-patching-across-industrial-vendors","Critical ICS Vulnerabilities Demand Urgent Patching Across Industrial Vendors","2026-10-14T16:20:20.989+00:00",{"slug":39,"title":40,"published_at":41},"privilege-escalation-flaw-in-ignition-scada-software-demands-immediate-patching","Privilege Escalation Flaw in Ignition SCADA Software Demands Immediate Patching","2026-10-14T00:21:48.311+00:00",{"slug":43,"title":44,"published_at":45},"legacy-ot-refrigeration-controllers-exploited-across-french-supermarket-chain","Legacy OT Refrigeration Controllers Exploited Across French Supermarket Chain","2026-10-13T14:21:25.902+00:00",{"slug":47,"title":48,"published_at":49},"ai-powered-vulnerability-scanning-accelerates-oss-patching-and-ot-security","AI-Powered Vulnerability Scanning Accelerates OSS Patching and OT Security","2026-10-09T10:22:05.082+00:00",{"slug":51,"title":52,"published_at":53},"multiple-vulnerabilities-in-satel-netco-design-threaten-critical-infrastructure","Multiple Vulnerabilities in Satel Netco Design Threaten Critical Infrastructure","2026-10-08T18:21:44.516+00:00",{"slug":55,"title":56,"published_at":57},"critical-flaws-in-grid-protection-alliance-software-enable-unauthenticated-rce","Critical Flaws in Grid Protection Alliance Software Enable Unauthenticated RCE","2026-10-08T18:21:30.364+00:00",{"slug":59,"title":60,"published_at":61},"hard-coded-credentials-and-missing-authentication-expose-industrial-switches-to-full-compromise","Hard-Coded Credentials and Missing Authentication Expose Industrial Switches to Full Compromise","2026-10-08T18:21:14.05+00:00",{"slug":63,"title":64,"published_at":65},"unauthorized-portal-access-exposes-400000-utility-customer-records","Unauthorized Portal Access Exposes 400,000 Utility Customer Records","2026-10-07T16:21:13.362+00:00",[67,72,77,82,87,92],{"slug":68,"name":69,"problem":70,"stories":71},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",98,{"slug":73,"name":74,"problem":75,"stories":76},"patch-management","Automated patch management","Known holes get closed in days, not months.",81,{"slug":78,"name":79,"problem":80,"stories":81},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",55,{"slug":83,"name":84,"problem":85,"stories":86},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",41,{"slug":88,"name":89,"problem":90,"stories":91},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",10,{"slug":93,"name":94,"problem":95,"stories":96},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",9,[98,104,110,115,121,127,132,137],{"family":99,"item":100,"code":101,"title":102,"together":103},"nist-sp","800-82","SP 800-82","SP 800-82 Rev. 3: Guide to Operational Technology (OT) Security",106,{"family":105,"item":106,"code":107,"title":108,"together":109},"cis","12","Control 12","Network Infrastructure Management",93,{"family":105,"item":111,"code":112,"title":113,"together":114},"7","Control 7","Continuous Vulnerability Management",90,{"family":116,"item":117,"code":118,"title":119,"together":120},"iec-62443","3-3","62443-3-3","IEC 62443-3-3: System security requirements and security levels",76,{"family":122,"item":123,"code":124,"title":125,"together":126},"nist-800-53","si-2","SI-2","Flaw Remediation",62,{"family":128,"item":129,"code":130,"title":130,"together":131},"itil","overview","ITIL",37,{"family":105,"item":133,"code":134,"title":135,"together":136},"4","Control 4","Secure Configuration of Enterprise Assets and Software",34,{"family":122,"item":138,"code":139,"title":140,"together":141},"ac-3","AC-3","Access Enforcement",29]