2024-22231. Critical Infrastructure Protection Reliability Standard CIP-015-1-Cyber Security-Internal Network Security Monitoring

Annual Changes Proposed by the NOPR in Docket No. RM24-7-000 ⁵²

	Number of respondents	Annual number of responses per respondent	Total number of responses	Average burden & cost per response 53	Total annual burden hours & total annual cost	Cost per respondent ($)
	(1)	(2)	(1) * (2) = (3)	(4)	(3) * (4) = (5)	(5) ÷ (1)
Create one or more documented process(es) (R1)	400	1	400	40 hrs.; $3,880	16,000 hrs.; $1,552,000	$3,880
Create documentation detailing network data feed(s) and reason (R1.1)	400	1	400	60 hrs.; $5,820	24,000 hrs.; $2,328,000	5,820
Create documentation of: anomalous events and baseline used to detect anomalous events (R1.2)	400	1	400	60 hrs.; $5,820	24,000 hrs.; $2,328,000	5,820
Create documentation of methods to: evaluate anomalous activity; response to detected activity; and escalation process(es) (R1.3)	400	1	400	60 hrs.; $5,820	24,000 hrs.; $2,328,000	5,820
Create documentation of: data retention process(es); system configuration(s), or system-generated report(s) (R2)	400	1	400	60 hrs.; $5,820	24,000 hrs.; $2,328,000	5,820
Create documentation of how the collected data is being protected (R3)	400	1	400	60 hrs.; $5,820	24,000 hrs.; $2,328,000	5,820
Total burden for FERC-725B(5) under CIP-015-1			2,400		136,000 hrs.; $13,192,000	32,980