4170 Federal Register / Vol. 87, No. 18 / Thursday, January 27, 2022 / Proposed Rules 

Authority for This Rulemaking 

Title 49 of the United States Code 

specifies the FAA’s authority to issue 

rules on aviation safety. Subtitle I, 

section 106, describes the authority of 

the FAA Administrator. Subtitle VII: 

Aviation Programs, describes in more 

detail the scope of the Agency’s 

authority. 

The FAA is issuing this rulemaking 

under the authority described in 

Subtitle VII, Part A, Subpart III, Section 

44701: General requirements. Under 

that section, Congress charges the FAA 

with promoting safe flight of civil 

aircraft in air commerce by prescribing 

regulations for practices, methods, and 

procedures the Administrator finds 

necessary for safety in air commerce. 

This regulation is within the scope of 

that authority because it addresses an 

unsafe condition that is likely to exist or 

develop on products identified in this 

rulemaking action. 

Regulatory Findings 

The FAA determined that this 

proposed AD would not have federalism 

implications under Executive Order 

13132. This proposed AD would not 

have a substantial direct effect on the 

States, on the relationship between the 

national government and the States, or 

on the distribution of power and 

responsibilities among the various 

levels of government. 

For the reasons discussed above, I 

certify this proposed regulation: 

(1) Is not a ‘‘significant regulatory 

action’’ under Executive Order 12866, 

(2) Would not affect intrastate 

aviation in Alaska, and 

(3) Would not have a significant 

economic impact, positive or negative, 

on a substantial number of small entities 

under the criteria of the Regulatory 

Flexibility Act. 

List of Subjects in 14 CFR Part 39 

Air transportation, Aircraft, Aviation 

safety, Incorporation by reference, 

Safety. 

The Proposed Amendment 

Accordingly, under the authority 

delegated to me by the Administrator, 

the FAA proposes to amend 14 CFR part 

39 as follows: 

PART 39—AIRWORTHINESS 

DIRECTIVES 

■ 1. The authority citation for part 39 

continues to read as follows: 

Authority: 49 U.S.C. 106(g), 40113, 44701. 

§ 39.13 [Amended] 

■ 2. The FAA amends § 39.13 by adding 

the following new airworthiness 

directive: 

Textron Aviation Inc. (Type Certificate 

previously held by Cessna Aircraft 

Company): Docket No. FAA–2022–0014; 

Project Identifier AD–2021–00114–A. 

(a) Comments Due Date 

The FAA must receive comments on this 

airworthiness directive (AD) by March 14, 

2022. 

(b) Affected ADs 

None. 

(c) Applicability 

This AD applies to Textron Aviation Inc. 

(Type Certificate previously held by Cessna 

Aircraft Company) Model 120 and 140 

airplanes, serial numbers (S/Ns) 10070 

through 15075, and Model 140A airplanes, 

all serial numbers, certificated in any 

category. 

(d) Subject 

Joint Aircraft System Component (JASC) 

Code 2510, Flight Compartment Equipment. 

(e) Unsafe Condition 

This AD was prompted by reports of seat 

belt center bracket failures from overstress. 

The FAA is issuing this AD to prevent failure 

of the seat belt center brackets. The unsafe 

condition, if not addressed, could result in 

failure of the seat belt center bracket, which 

could lead to failure of the seat belt restraint 

system and injury to occupants. 

(f) Compliance 

Comply with this AD within the 

compliance times specified, unless already 

done. 

(g) Required Actions 

(1) Within 12 months after the effective 

date of this AD, determine if the seatbelt 

center bracket located between the two seats 

is made of steel by placing a magnet on the 

center of the bracket. This action may be 

performed by the owner/operator (pilot) 

holding at least a private pilot certificate and 

must be entered into the aircraft records 

showing compliance with this AD in 

accordance with 14 CFR 43.9(a)(1) through 

(4) and 14 CFR 91.417(a)(2)(v). The record 

must be maintained as required by 14 CFR 

91.417. This authority is not applicable to 

aircraft being operated under 14 CFR part 

119. 

(i) If the seat belt center bracket is made 

of steel, no additional action is required. 

(ii) If the seat belt center bracket is not 

made of steel, within 12 months after the 

effective date of this AD, replace with a steel 

part number (P/N) 0425132 seat belt center 

bracket. 

(2) As of the effective date of this AD, do 

not install a seat belt center bracket P/N 

0425132 that is not made of steel on any 

airplane. 

(h) Alternative Methods of Compliance 

(AMOCs) 

(1) The Manager, Wichita ACO Branch, 

FAA, has the authority to approve AMOCs 

for this AD, if requested using the procedures 

found in 14 CFR 39.19. In accordance with 

14 CFR 39.19, send your request to your 

principal inspector or local Flight Standards 

District Office, as appropriate. If sending 

information directly to the manager of the 

certification office, send it to the attention of 

the person identified in paragraph (i) of this 

AD. 

(2) Before using any approved AMOC, 

notify your appropriate principal inspector, 

or lacking a principal inspector, the manager 

of the local flight standards district office/ 

certificate holding district office. 

(i) Related Information 

For more information about this AD, 

contact Bobbie Kroetch, Aviation Safety 

Engineer, Wichita ACO Branch, FAA, 1801 

Airport Road, Wichita, KS 67209; phone: 

(316) 946–4155; email: bobbie.kroetch@

faa.gov or Wichita-COS@faa.gov. 

Issued on January 20, 2022. 

Ross Landes, 

Deputy Director for Regulatory Operations, 

Compliance & Airworthiness Division, 

Aircraft Certification Service. 

[FR Doc. 2022–01541 Filed 1–26–22; 8:45 am] 

BILLING CODE 4910–13–P 

DEPARTMENT OF TRANSPORTATION 

Federal Aviation Administration 

14 CFR Part 39 

[Docket No. FAA–2022–0016; Project 

Identifier MCAI–2021–00945–T] 

RIN 2120–AA64 

Airworthiness Directives; Bombardier, 

Inc., Airplanes 

AGENCY: Federal Aviation 

Administration (FAA), DOT. 

ACTION: Notice of proposed rulemaking 

(NPRM). 

SUMMARY: The FAA proposes to adopt a 

new airworthiness directive (AD) for 

certain Bombardier, Inc., Model BD– 

100–1A10 airplanes. This proposed AD 

was prompted by a report that the nose 

wheel steering selector valve (SSV) can 

be slow to deactivate under low 

temperature conditions. This proposed 

AD would require replacing the affected 

nose wheel SSV with a redesigned nose 

wheel SSV, and performing an 

operational test of the nose wheel SSV 

and nose wheel steering control system. 

This proposed AD would also prohibit 

the installation of a certain nose wheel 

SSV. The FAA is proposing this AD to 

address the unsafe condition on these 

products. 

DATES: The FAA must receive comments 

on this proposed AD by March 14, 2022. 

ADDRESSES: You may send comments, 

using the procedures found in 14 CFR 


lotter on DSK11XQN23PROD with PROPOSALS1
Federal Register / Vol. 87, No. 18 / Thursday, January 27, 2022 / Proposed Rules 4171 

11.43 and 11.45, by any of the following 

methods: 

• Federal eRulemaking Portal: Go to 

https://www.regulations.gov. Follow the 

instructions for submitting comments. 

• Fax: 202–493–2251. 

• Mail: U.S. Department of 

Transportation, Docket Operations, M– 

30, West Building Ground Floor, Room 

W12–140, 1200 New Jersey Avenue SE, 

Washington, DC 20590. 

• Hand Delivery: Deliver to Mail 

address above between 9 a.m. and 5 

p.m., Monday through Friday, except 

Federal holidays. 

For service information identified in 

this NPRM, contact Bombardier 

Business Aircraft Customer Response 

Center, 400 Coˆte-Vertu Road West, 

Dorval, Que ́bec H4S 1Y9, Canada; 

telephone 514–855–2999; email ac.yul@

aero.bombardier.com; internet http://

www.bombardier.com. You may view 

this service information at the FAA, 

Airworthiness Products Section, 

Operational Safety Branch, 2200 South 

216th St., Des Moines, WA. For 

information on the availability of this 

material at the FAA, call 206–231–3195. 

Examining the AD Docket 

You may examine the AD docket at 

https://www.regulations.gov by 

searching for and locating Docket No. 

FAA–2022–0016; or in person at Docket 

Operations between 9 a.m. and 5 p.m., 

Monday through Friday, except Federal 

holidays. The AD docket contains this 

NPRM, any comments received, and 

other information. The street address for 

Docket Operations is listed above. 

FOR FURTHER INFORMATION CONTACT: 

Chirayu Gupta, Aerospace Engineer, 

Mechanical Systems and Administrative 

Services Section, FAA, New York ACO 

Branch, 1600 Stewart Avenue, Suite 

410, Westbury, NY 11590; telephone 

516–228–7300; fax 516–794–5531; email 

9-avs-nyaco-cos@faa.gov. 

SUPPLEMENTARY INFORMATION: 

Comments Invited 

The FAA invites you to send any 

written relevant data, views, or 

arguments about this proposal. Send 

your comments to an address listed 

under ADDRESSES. Include ‘‘Docket No. 

FAA–2022–0016; Project Identifier 

MCAI–2021–00945–T’’ at the beginning 

of your comments. The most helpful 

comments reference a specific portion of 

the proposal, explain the reason for any 

recommended change, and include 

supporting data. The FAA will consider 

all comments received by the closing 

date and may amend the proposal 

because of those comments. 

Except for Confidential Business 

Information (CBI) as described in the 

following paragraph, and other 

information as described in 14 CFR 

11.35, the FAA will post all comments 

received, without change, to https://

www.regulations.gov, including any 

personal information you provide. The 

agency will also post a report 

summarizing each substantive verbal 

contact received about this NPRM. 

Confidential Business Information 

CBI is commercial or financial 

information that is both customarily and 

actually treated as private by its owner. 

Under the Freedom of Information Act 

(FOIA) (5 U.S.C. 552), CBI is exempt 

from public disclosure. If your 

comments responsive to this NPRM 

contain commercial or financial 

information that is customarily treated 

as private, that you actually treat as 

private, and that is relevant or 

responsive to this NPRM, it is important 

that you clearly designate the submitted 

comments as CBI. Please mark each 

page of your submission containing CBI 

as ‘‘PROPIN.’’ The FAA will treat such 

marked submissions as confidential 

under the FOIA, and they will not be 

placed in the public docket of this 

NPRM. Submissions containing CBI 

should be sent to Chirayu Gupta, 

Aerospace Engineer, Mechanical 

Systems and Administrative Services 

Section, FAA, New York ACO Branch, 

1600 Stewart Avenue, Suite 410, 

Westbury, NY 11590; telephone 516– 

228–7300; fax 516–794–5531; email 9- 

avs-nyaco-cos@faa.gov. Any 

commentary that the FAA receives 

which is not specifically designated as 

CBI will be placed in the public docket 

for this rulemaking. 

Background 

Transport Canada Civil Aviation 

(TCCA), which is the aviation authority 

for Canada, has issued TCCA AD CF– 

2021–29, dated August 18, 2021 (TCCA 

AD CF–2021–29) (also referred to after 

this as the Mandatory Continuing 

Airworthiness Information, or the 

MCAI), to correct an unsafe condition 

for certain Bombardier, Inc., Model BD– 

100–1A10 airplanes. You may examine 

the MCAI in the AD docket at https:// 

www.regulations.gov by searching for 

and locating Docket No. FAA–2022– 

0016. 

This proposed AD was prompted by 

a report that the nose wheel SSV can be 

slow to deactivate under low 

temperature conditions. The FAA is 

proposing this AD to address a slow 

nose wheel SSV deactivation, which, in 

combination with an un-commanded 

steering input, could lead to a delayed 

transition to free castor mode and result 

in an aircraft runway excursion. See the 

MCAI for additional background 

information. 

Related Service Information Under 1 

CFR Part 51 

Bombardier has issued Service 

Bulletin 100–32–35, dated March 30, 

2021, and Service Bulletin 350–32–011, 

dated March 30, 2021. This service 

information describes procedures for 

replacing the existing nose wheel SSV 

(part number 41130–107) with a 

redesigned nose wheel SSV (part 

number 41130–111), and performing an 

operational test of the nose wheel SSV 

and nose wheel steering control system. 

These documents are distinct since they 

apply to different airplane 

configurations. This service information 

is reasonably available because the 

interested parties have access to it 

through their normal course of business 

or by the means identified in the 

ADDRESSES section. 

FAA’s Determination 

This product has been approved by 

the aviation authority of another 

country, and is approved for operation 

in the United States. Pursuant to the 

FAA’s bilateral agreement with the State 

of Design Authority, the FAA has been 

notified of the unsafe condition 

described in the MCAI and service 

information referenced above. The FAA 

is proposing this AD because the FAA 

evaluated all the relevant information 

and determined the unsafe condition 

described previously is likely to exist or 

develop on other products of the same 

type design. 

Proposed AD Requirements in This 

NPRM 

This proposed AD would require 

accomplishing the actions specified in 

the service information already 

described. 

Costs of Compliance 

The FAA estimates that this AD, if 

adopted as proposed, would affect 660 

airplanes of U.S. registry. The FAA 

estimates the following costs to comply 

with this proposed AD: 


lotter on DSK11XQN23PROD with PROPOSALS1
4172 Federal Register / Vol. 87, No. 18 / Thursday, January 27, 2022 / Proposed Rules 

ESTIMATED COSTS FOR REQUIRED ACTIONS

Labor cost Parts cost Cost per 

product 

Cost on U.S. 

operators 

4 work-hours × $85 per hour = $340 .......................................................................................... $5,793 $6,133 $4,047,780 

Authority for This Rulemaking 

Title 49 of the United States Code 

specifies the FAA’s authority to issue 

rules on aviation safety. Subtitle I, 

section 106, describes the authority of 

the FAA Administrator. Subtitle VII: 

Aviation Programs, describes in more 

detail the scope of the Agency’s 

authority. 

The FAA is issuing this rulemaking 

under the authority described in 

Subtitle VII, Part A, Subpart III, Section 

44701: General requirements. Under 

that section, Congress charges the FAA 

with promoting safe flight of civil 

aircraft in air commerce by prescribing 

regulations for practices, methods, and 

procedures the Administrator finds 

necessary for safety in air commerce. 

This regulation is within the scope of 

that authority because it addresses an 

unsafe condition that is likely to exist or 

develop on products identified in this 

rulemaking action. 

Regulatory Findings 

The FAA determined that this 

proposed AD would not have federalism 

implications under Executive Order 

13132. This proposed AD would not 

have a substantial direct effect on the 

States, on the relationship between the 

national Government and the States, or 

on the distribution of power and 

responsibilities among the various 

levels of government. 

For the reasons discussed above, I 

certify this proposed regulation: 

(1) Is not a ‘‘significant regulatory 

action’’ under Executive Order 12866, 

(2) Will not affect intrastate aviation 

in Alaska, and 

(3) Will not have a significant 

economic impact, positive or negative, 

on a substantial number of small entities 

under the criteria of the Regulatory 

Flexibility Act. 

List of Subjects in 14 CFR Part 39 

Air transportation, Aircraft, Aviation 

safety, Incorporation by reference, 

Safety. 

The Proposed Amendment 

Accordingly, under the authority 

delegated to me by the Administrator, 

the FAA proposes to amend 14 CFR part 

39 as follows: 

PART 39—AIRWORTHINESS 

DIRECTIVES 

■ 1. The authority citation for part 39 

continues to read as follows: 

Authority: 49 U.S.C. 106(g), 40113, 44701. 

§ 39.13 [Amended] 

■ 2. The FAA amends § 39.13 by adding 

the following new airworthiness 

directive: 

Bombardier, Inc.: Docket No. FAA–2022– 

0016; Project Identifier MCAI–2021– 

00945–T. 

(a) Comments Due Date 

The FAA must receive comments on this 

airworthiness directive (AD) by March 14, 

2022. 

(b) Affected ADs 

None. 

(c) Applicability 

This AD applies to Bombardier, Inc., 

Model BD–100–1A10 airplanes, certificated 

in any category, serial numbers 20003 

through 20892 inclusive. 

(d) Subject 

Air Transport Association (ATA) of 

America Code 32, Landing gear. 

(e) Unsafe Condition 

This AD was prompted by a report that the 

nose wheel steering selector valve (SSV) can 

be slow to deactivate under low temperature 

conditions. The FAA is issuing this AD to 

address a slow nose wheel SSV deactivation, 

which, in combination with an uncommanded steering input, could lead to a 

delayed transition to free castor mode and 

result in an aircraft runway excursion. 

(f) Compliance 

Comply with this AD within the 

compliance times specified, unless already 

done. 

(g) Replacement of Nose Wheel SSV 

Within 36 months after the effective date 

of this AD: Replace the nose wheel SSV part 

number 41130–107 with the redesigned nose 

wheel SSV part number 41130–111; and 

before further flight, perform an operational 

test of the nose wheel SSV and nose wheel 

steering control system; in accordance with 

paragraphs 2.B. and 2.C. of the 

Accomplishment Instructions of the 

applicable service information specified in 

paragraphs (g)(1) and (2) of this AD. If any 

test fails, do applicable corrective actions and 

repeat the test until the part passes the test. 

(1) Bombardier Service Bulletin 100–32– 

35, dated March 30, 2021. 

(2) Bombardier Service Bulletin 350–32– 

011, dated March 30, 2021. 

(h) Parts Installation Prohibition 

Do not install nose wheel SSV, part 

number 41130–107 on any airplane as of the 

applicable compliance time specified in 

paragraph (h)(1) or (h)(2) of this AD. 

(1) For airplanes that have nose wheel SSV, 

part number 41130–107 installed as of the 

effective date of this AD: After replacement 

of nose wheel SSV as required by paragraph 

(g) of this AD. 

(2) For airplanes that, as of the effective 

date of this AD, do not have nose wheel SSV, 

part number 41130–107 installed: As of the 

effective date of this AD. 

(i) No Reporting Requirement 

Although the service information specified 

in paragraphs (g)(1) and (2) of this AD 

specifies to submit certain information to the 

manufacturer, this AD does not include that 

requirement. 

(j) Other FAA AD Provisions 

The following provisions also apply to this 

AD: 

(1) Alternative Methods of Compliance 

(AMOCs): The Manager, New York ACO 

Branch, FAA, has the authority to approve 

AMOCs for this AD, if requested using the 

procedures found in 14 CFR 39.19. In 

accordance with 14 CFR 39.19, send your 

request to your principal inspector or 

responsible Flight Standards Office, as 

appropriate. If sending information directly 

to the manager of the certification office, 

send it to ATTN: Program Manager, 

Continuing Operational Safety, FAA, New 

York ACO Branch, 1600 Stewart Avenue, 

Suite 410, Westbury, NY 11590; telephone 

516–228–7300; fax 516–794–5531. Before 

using any approved AMOC, notify your 

appropriate principal inspector, or lacking a 

principal inspector, the manager of the 

responsible Flight Standards Office. 

(2) Contacting the Manufacturer: For any 

requirement in this AD to obtain instructions 

from a manufacturer, the instructions must 

be accomplished using a method approved 

by the Manager, New York ACO Branch, 

FAA; or Transport Canada Civil Aviation 

(TCCA); or Bombardier, Inc.’s TCCA Design 

Approval Organization (DAO). If approved by 

the DAO, the approval must include the 

DAO-authorized signature. 

(k) Related Information 

(1) Refer to Mandatory Continuing 

Airworthiness Information (MCAI) TCCA AD 

CF–2021–29, dated August 18, 2021, for 

related information. This MCAI may be 

found in the AD docket on the internet at 

https://www.regulations.gov by searching for 

and locating Docket No. FAA–2022–0016. 

(2) For more information about this AD, 

contact Chirayu Gupta, Aerospace Engineer, 

Mechanical Systems and Administrative 

Services Section, FAA, New York ACO 

Branch, 1600 Stewart Avenue, Suite 410, 


lotter on DSK11XQN23PROD with PROPOSALS1
Federal Register / Vol. 87, No. 18 / Thursday, January 27, 2022 / Proposed Rules 4173 

1 16 U.S.C. 824o(d)(5). 

2Reliability Standard CIP–002–5.1a (BES Cyber 

System Categorization) sets forth criteria that 

registered entities apply to categorize BES Cyber 

Systems as high, medium, or low depending on the 

adverse impact that loss, compromise, or misuse of 

those BES Cyber Systems could have on the reliable 

operation of the BES. The impact level (i.e., high, 

medium, or low) of BES Cyber Systems, in turn, 

determines the applicability of security controls for 

BES Cyber Systems that are contained in the 

remaining CIP Reliability Standards (i.e., Reliability 

Standards CIP–003–8 to CIP–013–1). 

3A trust zone is defined as a ‘‘discrete computing 

environment designated for information processing, 

storage, and/or transmission that share the rigor or 

robustness of the applicable security capabilities 

necessary to protect the traffic transiting in and out 

of a zone and/or the information within the zone.’’ 

U.S. Department of Homeland Security, 

Cybersecurity and Infrastructure Security Agency 

(CISA), Trusted internet Connections 3.0: Reference 

Architecture, at 2 (July 2020), https://www.cisa.gov/ 

sites/default/files/publications/CISA_

TIC%203.0%20Vol.%202%20

Reference%20Architecture.pdf. 

4The NERC Glossary defines an ESP as ‘‘the 

logical border surrounding a network to which BES 

Cyber Systems are connected using a routable 

protocol.’’ NERC, Glossary of Terms Used in NERC 

Reliability Standards (June 28, 2021), https://

www.nerc.com/pa/Stand/Glossary%20of

%20Terms/Glossary_of_Terms.pdf. 

5NERC, ERO Enterprise CMEP Practice Guide: 

Network Monitoring Sensors, Centralized 

Collectors, and Information Sharing (June 4, 2021), 

https://www.nerc.com/pa/comp/guidance/ 

CMEPPracticeGuidesDL/CMEP%20Practice%

20Guide%20-%20Network%20Monitoring

%20Sensors.pdf (CMEP Practice Guide). 

6 Id. at 1. 

Westbury, NY 11590; telephone 516–228– 

7300; fax 516–794–5531; email 9-avs-nyacocos@faa.gov. 

(3) For service information identified in 

this AD, contact Bombardier Business 

Aircraft Customer Response Center, 400 CoˆteVertu Road West, Dorval, Que ́bec H4S 1Y9, 

Canada; telephone 514–855–2999; email 

ac.yul@aero.bombardier.com; internet http:// 

www.bombardier.com. You may view this 

service information at the FAA, 

Airworthiness Products Section, Operational 

Safety Branch, 2200 South 216th St., Des 

Moines, WA. For information on the 

availability of this material at the FAA, call 

206–231–3195. 

Issued on January 20, 2022. 

Lance T. Gant, 

Director, Compliance & Airworthiness 

Division, Aircraft Certification Service. 

[FR Doc. 2022–01477 Filed 1–26–22; 8:45 am] 

BILLING CODE 4910–13–P 

DEPARTMENT OF ENERGY 

Federal Energy Regulatory 

Commission 

18 CFR Part 40 

[Docket No. RM22–3–000] 

Internal Network Security Monitoring 

for High and Medium Impact Bulk 

Electric System Cyber Systems 

AGENCY: Federal Energy Regulatory 

Commission, Department of Energy. 

ACTION: Notice of proposed rulemaking. 

SUMMARY: The Federal Energy 

Regulatory Commission (Commission) 

proposes to direct the North American 

Electric Reliability Corporation to 

develop and submit for Commission 

approval new or modified Reliability 

Standards that require internal network 

security monitoring within a trusted 

Critical Infrastructure Protection 

networked environment for high and 

medium impact Bulk Electric System 

Cyber Systems. 

DATES: Comments are due March 28, 

2022. 

ADDRESSES: Comments, identified by 

docket number, may be filed in the 

following ways. Electronic filing 

through https://www.ferc.gov, is 

preferred. 

• Electronic Filing: Documents must 

be filed in acceptable native 

applications and print-to-PDF, but not 

in scanned or picture format. 

• For those unable to file 

electronically, comments may be filed 

by U.S. Postal Service mail or by hand 

(including courier) delivery. 

Æ Mail via U.S. Postal Service only: 

Addressed to: Federal Energy 

Regulatory Commission, Office of the 

Secretary, 888 First Street NE, 

Washington, DC 20426. 

Æ For delivery via any other carrier 

(including courier): Deliver to: Federal 

Energy Regulatory Commission, Office 

of the Secretary, 12225 Wilkins Avenue, 

Rockville, MD 20852. 

FOR FURTHER INFORMATION CONTACT: 

Cesar Tapia (Technical Information), 

Office of Electric Reliability, Federal 

Energy Regulatory Commission, 888 

First Street NE, Washington, DC 

20426, (202) 502–6559, cesar.tapia@

ferc.gov 

Kevin Ryan (Legal Information), Office 

of the General Counsel, Federal 

Energy Regulatory Commission, 888 

First Street NE, Washington, DC 

20426, (202) 502–6840, kevin.ryan@

ferc.gov 

Milena Yordanova (Legal Information), 

Office of the General Counsel, Federal 

Energy Regulatory Commission, 888 

First Street NE, Washington, DC 

20426, (202) 502–6194, 

milena.yordanova@ferc.gov 

SUPPLEMENTARY INFORMATION: 

1. Pursuant to section 215(d)(5) of the 

Federal Power Act (FPA),1 the 

Commission proposes to direct the 

North American Electric Reliability 

Corporation (NERC), the Commissioncertified Electric Reliability 

Organization (ERO), to develop new or 

modified Reliability Standards that 

require network security monitoring 

internal to a Critical Infrastructure 

Protection (CIP) networked environment 

(internal network security monitoring or 

INSM) for high and medium impact 

Bulk Electric System (BES) Cyber 

Systems.2 INSM is a subset of network 

security monitoring that is applied 

within a ‘‘trust zone,’’ 3 such as an 

Electronic Security Perimeter (ESP),4

and is designed to address situations 

where vendors or individuals with 

authorized access are considered secure 

and trustworthy but could still 

introduce a cybersecurity risk to a high 

or medium impact BES Cyber System. 

2. Although the currently effective 

CIP Reliability Standards offer a broad 

set of cybersecurity protections, they do 

not address INSM. This omission 

constitutes a gap in the CIP Reliability 

Standards. Including INSM 

requirements in the CIP Reliability 

Standards would ensure that 

responsible entities maintain visibility 

over communications between 

networked devices within a trust zone 

(i.e., within an ESP), not simply monitor 

communications at the network 

perimeter access point(s), i.e., at the 

boundary of an ESP as required by the 

current CIP requirements. In the event 

of a compromised ESP, improving 

visibility within a network would 

increase the probability of early 

detection of malicious activities and 

would allow for quicker mitigation and 

recovery from an attack. In addition to 

improved incident response capabilities 

and situational awareness, INSM also 

contributes to better vulnerability 

assessments within an ESP, all of which 

support an entity’s cybersecurity 

defenses and could reduce the impact of 

cyberattacks. 

3. While the currently effective CIP 

Reliability Standards do not require 

INSM, NERC has recognized the 

proliferation and usefulness of network 

monitoring technology on the BES. For 

example, on January 4, 2021, NERC 

issued a Compliance Monitoring and 

Enforcement Program (CMEP) Practice 

Guide addressing Network Monitoring 

Sensors, Centralized Collectors, and 

Information Sharing.5 NERC explained 

that the CMEP Practice Guide was 

developed in response to a U.S. 

Department of Energy (DOE) initiative 

‘‘to advance technologies and systems 

that will provide cyber visibility, 

detection, and response capabilities for 

[industrial control systems] of electric 

utilities.’’ 6 As discussed below, in view 


lotter on DSK11XQN23PROD with PROPOSALS1