We recently reviewed Industrial Defender’s ASM that had a large NERC CIP compliance automation component. Now AlertEnterprise enters that market with their ComplianceExpress. This review is limited to price and spreadsheet information.
The first interesting data point is AlertEnterprise is specifically targeting this at the smaller utilities, municipals and cooperatives. While they may appreciate the automation more because of limited manpower, they also are likely to have fewer critical cyber assets.
The main product features are:
- Document management for the documents that must be created and maintained for CIP
- Workflow management to guide the company through the required processes
- Notification monitoring of key feeds for NERC CIP information
- Compliance event tracking
Pricing starts at US$99,000 and can go up based on what modules are selected and the size of the system. It is less than the ASM pricing, but it also has significantly less features and capabilities.
A big question with all NERC CIP compliance products is future proofing. If you buy it today, does the support come with the upgrades for NERC CIP Version 5? This will be important to safeguard not only the investment in buying the product, but also the manpower invested in entering the data.
Image by squeaks2569