COMPUTERIZED SYSTEM FOR COMPLYING WITH CERTAIN CRITICAL INFRASTRUCTURE PROTECTION REQUIREMENTS

摘要

A computerized system for complying with critical infrastructure protection (“CIP”) standards concerning system configuration changes. The system can be used to automatically identify and track changes to computers on the network, improving system security and CIP compliance reporting. In certain embodiments, the system collects system information on servers and workstations using built-in commands. The configuration profiles of these computers/devices can be archived for audit purposes.

主权项

1. A computerized system for complying with certain critical infrastructure protection requirements, wherein the system comprises:
a non-transitory computer-readable medium having a computer program code stored thereon; a database including one or more records that establishes baseline system configurations for a plurality of devices; a processor in communication with the computer-readable memory configured to carry out instructions in accordance with the computer program code, wherein the computer program code, when executed by the processor, causes the processor to perform operations comprising:
collecting system information for a plurality of devices on a communications network, wherein at least a portion of the devices for which system information is collected are cyber-critical assets;comparing the collected system information for the plurality of devices with the baseline system configurations stored in the database to determine whether any changes have been made;reporting whether changes have been made to any devices responsive to the comparing step.