Logging and NERC Compliance Automation Solution

The City of Farmington is seeking a logging and compliance monitoring solution to manage logs, detect unauthorized changes, and generate evidence required under North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) requirements. The solution should support CIP reporting standards, including CIP-002 through CIP-015, and provide operational insight and audit readiness. The proposal should include costs for implementation, ongoing maintenance, and training for FEUS support staff. • The solution should be able to collect, monitor, and report on security events, configuration baselines, patch activity, and inventory data across critical systems. • The solution should support CIP reporting standards, including CIP-002 through CIP-015. • The solution should provide operational insight and audit readiness. • The solution should be able to detect unauthorized changes, track personnel authorization, and retain relevant logs for compliance reviews. • The solution should be able to correlate changes across asset types and support API and scripting integration.