NERC CIP-015-2: EACMS, PACS, SCI Monitoring Explained
Summary: FERC proposed in June 2025 to approve NERC CIP-015-1 while directing NERC to extend internal network security monitoring to electronic access control or monitoring systems (EACMS) and physical access control systems (PACS) outside the Electronic Security Perimeter. The NERC Project 2025-02 drafting team's initial ballot for CIP-015-2, which adds Cyber Systems to the requirement language and Shared Cyber Infrastructure (SCI) to the applicability column, passed at 84.33% on January 20, 2026.
What's compelling: EACMS, PACS, and SCI sit outside the ESP with the visibility, authority, and connectivity adversaries need to plan and disguise lateral movement into BES Cyber Systems - and FERC's position is that you cannot secure the ESP while blind to activity in the systems that connect to it.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026