Free CIP-002 tool + O&P roadmap update

The scope of compliance work is expanding. As more inverter-based resources (IBRs) and large loads (data centers, crypto mining facilities) come online, the number of grid-connected systems subject to documentation and review increases.

In conversations with compliance teams, we consistently hear that general-purpose tools like shared file storage, ticketing systems, and spreadsheets force teams to reconstruct compliance activity, pulling evidence from multiple systems. We aim to go deeper - not just shadowing processes for audit purposes, but supporting actual, compliant processes andgenerating the necessary audit trail.

Continuing with our O&P roadmap, this week we launched FAC and PRC library tasks. FAC and PRC standards are consistently flagged as the most onerous of the O&P family. We’re also working on a new Controls feature that we believe will tie the Policies, Tasks and Evidence features back to specific standards in a game-changing way (sneak peak below). Also underway: Trainingand Cyber Incidents features.

Try it now

Product Updates 🚀

Released this week

FAC and PRC library tasks

• FAC and PRC library tasks are now available for import at the organization, control center and facility levels.

• Note: as the list of library tasks is now getting quite long, we are working on the ability to filter / toggle between families of standards.

Access Control dashboard metrics

• Access Control mean time to resolve (MTTR) is now visible on the dashboard, showing how long each type of access request takes on average to move from submission to final review.

Structured evidence folders and version control

• Evidence files are automatically organized by Control Centers, Facilities, Policies, and Standards so teams can find the right artifact quickly and maintain consistent structure without manual organization.

• Upload new versions of evidence files and view version history.

Incident tracking

• Track and manage cybersecurity incidents in a structured, auditable workflow. The Incidents feature is designed to help teams prepare for post-incident reviews.

Coming Soon

Training

• Fulfill and track your CIP-003 and CIP-004 security awareness and training requirements. Create training content, assign to users and track completion.

Cyber Incidents

• Triage, track and document cyber incidents collaboratively.

Controls

• Controls map to requirements in each standard so you can track compliance across related documents, tasks, and evidence. Controls have off-the-shelf event-triggered workflows, so when a protection system fails or a regulator makes a request, you'll know exactly what to do and when.

Get a sneak peek

Industry Update ⚡️

NERC released its Q4 2025 Large Loads Task Force update, outlining how the organization is evaluating reliability risks introduced by new loads like data centers and crypto mining facilities.

What you need to know:

• The primary concern is pace and concentration of load growth, especially where large loads connect faster than planning and operating models can adapt.

• Near-term mitigation focuses on visibility and coordination, with guidance (not new requirements) expected to capture emerging best practices.

• Longer-term regulatory treatment is still being evaluated, with NERC coordinating with FERC before any compliance changes are proposed.

Read the full report.

Compliance Resources 🛠️

If you’re unsure how your facilities are categorized under CIP-002, our free Impact Categorization Tool helps you understand your requirements in under five minutes.