CIP Medium Impact

Real requirements. Real controls.

See Medium Impact features

Medium Impact adds 190+ requirements across CIP-003 through CIP-015. Spreadsheets stop working. Generic GRC tools send reminders while you still gather evidence manually. You need something built for this.

When your aggregated generation capacity crosses 1,500 MW within a given interconnection, NERC expects documented policies, plans, and procedures for everything from access management to incident response. The burden is real. The stakes are higher.

Raptor Comply gives you controls that match the regulatory structure. Every requirement maps to documentation, workflows, and evidence. Your team executes. The platform tracks.

What Medium Impact covers:

Policy management: Create, version, and approve policies

Personnel risk assessment: Track background checks and verification

Training: Create training content, assign to users and track completion.

Access control worfklows: Physical, electronic, TCA and removable media

Change management: Document changes to cyber systems and assets

Incident response: Log, track, and evidence security incidents

Task calendars: Never miss a regulatory deadline or periodic review

Auto-generated evidence: Stop recreating evidence packages manually

The difference:

Generic GRC tools make you configure everything from scratch. Raptor Comply comes pre-built for NERC CIP. You spend time on compliance work, not system configuration.