SigmaFlow

SigmaFlow  is a purpose-built compliance solution used by registered entities across North America to meet their NERC compliance needs. The SigmaFlow platform provides audit readiness, real-time visibility and compliance automation for both Critical Infrastructure Protection (CIP) and Operations and Planning (O&P) standards. Our suite of tools is built for this industry and implemented with help from our team of dedicated NERC professionals.

With an extendable data model and a set of flexible integration tools, SigmaFlow is able to collect data not just from its own processes but from every tool in your NERC environment. Evidence and data coming in are automatically tagged to the relevant standards and checked by our alerting and scheduling suite to ensure action is taken before compliance issues can arise. All data, internal and external, remains protected by role-based permissions ensuring each user sees exactly what they need and no more. This provides a single pane of glass to view your compliance stance in real-time, forms the basis needed to create audit packages on demand and reduces workload before and during audit for compliance staff.

Our workflow builder provides structure and scheduling of compliance processes, ensuring the right personnel are doing the right things at the right times. Our starting suites provide a compliant framework for the most challenging NERC standards, with the flexibility to incorporate your internal processes and additional controls into the workflow. Tasks are automatically scheduled with reminders and escalations, data from integrated systems can be incorporated seamlessly, and every key compliance field or piece of evidence can be automatically tagged for incorporation into RSAWs, ERT reports and managerial dashboards. Our team works as an extension of yours to deliver this tailored solution on a firm fixed price, and provides the training needed for you to own your compliance environment going forward.

CIP customers can leverage our SigmaFlow Beacon tool for configuration management. This unique solution allows secure monitoring and approvals in keeping with CIP-007 and CIP-010 as well as the controls associated with CIP-003 and CIP-005. This tool integrates directly into SigmaFlow’s libraries and workflows, supports a variety of device types and can be extended by our users to cover even more. A full historical reporting suite is included, guaranteeing our clients can answer difficult questions at audit on demand. The tool provides unparalleled ease of use and visibility for compliance staff, while our unique architecture ensures you do not sacrifice security for insight even in low-trust environments.

SigmaFlow can be deployed within your AWS environment, including your AWS Virtual Private Cloud (VPC), to provide a secure, scalable, and controlled compliance platform aligned to your organizational requirements. Our team can support the configuration and deployment of SigmaFlow on your AWS infrastructure, including Amazon EC2 instances required to host the SigmaFlow application and database.

We hope you join us on the road to easy, automated NERC compliance. Visit our Product Page  for more information or to schedule a demo.