NERC CIP-015-1 Is Approved—Here’s What Asset Owners Need to Do
Summary: On June 26, 2025, FERC issued Order No. 907 approving NERC CIP-015-1, which requires Internal Network Security Monitoring of east-west traffic inside Electronic Security Perimeters for High and Medium Impact Bulk Electric System Cyber Systems with External Routable Connectivity, effective October 1, 2028. FERC also directed NERC to develop modifications within one year expanding the scope to Electronic Access Control or Monitoring Systems and Physical Access Control Systems outside the ESP.
Bottom line: The enforceable deadline is October 1, 2028, and the version 2 scope FERC ordered - EACMS and PACS outside the ESP - is where an adversary posing as a trusted user could reach BES Cyber Systems inside the perimeter, a gap Responsible Entities will lack visibility into until it is closed.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026