CIP Medium Impact
At Medium impact, manual evidence is how audits go wrong.
Medium Impact adds 190+ requirements across CIP-003 through CIP-015. Spreadsheets stop working. Generic GRC tools send reminders while you still gather evidence manually. You need something built for this.
When your aggregated generation capacity crosses 1,500 MW within a given interconnection, NERC expects documented policies, plans, and procedures for everything from access management to incident response. The burden is real, and the stakes are higher at Medium impact.
Raptor Comply gives you controls that match the regulatory structure. Every requirement maps to documentation, workflows, and evidence. Your team executes. The platform tracks.
The difference:
Generic GRC tools make you configure everything from scratch. Raptor Comply comes pre-built for NERC CIP. You spend time on compliance work, not system configuration.