We are evaluating our networking system to determine if we are in compliance with NERC CIP. What were some major issues your power plant faced and what was performed to be in compliance with the NERC regulations? thanks

The major concern at our plant was due to the remote access used during tuning of the combustion turbines. This allowed access to control the units and change parameters. The other remote connectivity that just "reads" signals were not a big concern but only required that we (the owner) had control of the router's passwords and access.