Dragos Helps Electric Utilities Meet Expected NERC CIP Standard for Internal Network Security Monitoring (INSM)
Summary: Dragos announced on August 1, 2024 that its Platform supports the upcoming NERC CIP-015 requirements for Internal Network Security Monitoring, which mandate monitoring of east-west network traffic within CIP-networked environments for High and Medium impact Bulk Electric System Cyber Systems. FERC issued Order No. 893 in 2023 offering deferred cost recovery for eligible cybersecurity investments, and Dragos says it is working with utilities on early compliance planning.
What you should know: CIP-015 shifts the compliance requirement inward, to traffic between critical system components, where perimeter controls by definition do not reach - and the utilities that move early can pursue FERC Order No. 893 cost recovery while those that wait cannot.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026