FERC-725B, RM24-8 Final Rule, Mandatory Reliability Standards for Critical Infrastructure Protection (CIP)

Reliability Standard CIP-015-1 is a new cybersecurity-related Reliability Standard requiring Internal Network Security Monitoring (INSM) for Critical Infrastructure Protection (CIP) networked environments for all high impact bulk electric system (BES) Cyber Systems with and without external routable connectivity and medium impact BES Cyber Systems with external routable connectivity. Proposed Reliability Standard CIP-015-1 will not apply to medium impact BES Cyber Systems without external routable connectivity. The new standard, proposed by NERC, in June 2024, requires entities with BES facilities whose assets are designated high impact and medium impact with external routable connectivity to implement INSM for network traffic inside an electronic security perimeter to ensure the identification of anomalous network activity including an ongoing attack. High impact systems include large control centers. Medium impact systems include smaller control centers, ultra-high voltage transmission, and large substations and generating facilities.

The latest form for FERC-725B, RM24-8 Final Rule, Mandatory Reliability Standards for Critical Infrastructure Protection (CIP) expires 2026-06-30 and can be found here.

CIP Standards 004-7

Federal Enterprise Architecture: Energy - Energy Conservation and Preparedness