October 6, 2005

The Federal Energy Regulatory Commission's Unclassified Cyber Security Program—2005

Regulatory Commission (Commission) had taken steps to strengthen its cyber security program and implemented countermeasures to reduce network vulnerabilities addressed in our previous evaluation reports. Specifically, the Commission improved the Continuity of Operations Plan and system-specific disaster recovery plans. In addition, a System Development Life Cycle manual was developed and finalized to ensure that all information technology systems support Federal statutes and the Commission's business and strategic objectives.