FERC Approves NERC CIP-015-2: What It Means for Your INSM Program
Summary: On August 10, 2026, FERC approved Reliability Standard CIP-015-2 by letter order, and NERC announced the approval publicly on August 17. The standard expands internal network security monitoring requirements to High and Medium Impact BES Cyber Systems with External Routable Connectivity, adding EACMS and PACS through FERC Order No. 907 and SCI independently, with CIP-015-1 becoming enforceable October 1, 2028 and CIP-015-2 taking effect twelve months later.
What you should know: Dragos OT assessments found only 46 percent of environments had adequate network monitoring deployed, so more than half of utilities may lack the visibility the standard now mandates before the October 2029 phase begins.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026