Comments on: Automating NERC CIP compliance http://www.wrgross.com/blogs/security/2008/08/20/automating-nerc-cip-compliance/ All manner of goodness respecting the secure operation of digital systems. Tue, 07 Feb 2012 17:43:40 +0000 http://wordpress.org/?v=2.6.1 By: Mike Lohr http://www.wrgross.com/blogs/security/2008/08/20/automating-nerc-cip-compliance/#comment-168 Mike Lohr Thu, 21 Aug 2008 18:13:52 +0000 http://www.wrgross.com/blogs/security/2008/08/20/automating-nerc-cip-compliance/#comment-168 In terms of full disclosure I work for Tripwire. I thought I would provide some answers to your two questions. 1. This depends on the system itself. If this is a supported agent platform, then I have no fear that Tripwire will not cause availability issues. As you pointed out Tripwire has been around for a long time and over the years we have put more intelligence into the agent so that it can throttle itself on sensitive systems. In addition, Tripwire does support some systems without an agent at all. 2. Tripwire does not cause a lot of network traffic. Tripwire Enterprise was designed such that only detected changes are sent back to the central server. So in the course of a day very changes do occur (especially on the NERC systems) and therefore very little data is transmitted across the wire. I hope that helps. Michael Lohr mlohr@tripwire.com In terms of full disclosure I work for Tripwire. I thought I would provide some answers to your two questions.

1. This depends on the system itself. If this is a supported agent platform, then I have no fear that Tripwire will not cause availability issues. As you pointed out Tripwire has been around for a long time and over the years we have put more intelligence into the agent so that it can throttle itself on sensitive systems. In addition, Tripwire does support some systems without an agent at all.
2. Tripwire does not cause a lot of network traffic. Tripwire Enterprise was designed such that only detected changes are sent back to the central server. So in the course of a day very changes do occur (especially on the NERC systems) and therefore very little data is transmitted across the wire.

I hope that helps.

Michael Lohr
mlohr@tripwire.com

]]>