The best defense is proper preparation

A note on preparedness and visibility
It’s Dalton, writing to you from San Diego, where I am eternally grateful that bad weather is not evenly distributed across the grid. If you’re dealing with snow, ice or another once-in-a-generation winter storm right now, I hope you are staying safe and warm.
Let me ask you something about preparedness: if an auditor asked you right now how CIP-003 is covered at your site, could you answer confidently?
For many, the honest answer is “kind of… but it’d take some digging.” Policies live in one place, plans in another, and documentation is scattered across folders and tools. There’s no single view that ties it all together.
Likely, you just have a visibility problem. The good news is that it’s fixable. A single, live view that ties documentation, controls and evidence together is possible with Raptor Comply.
Industry Update ⚡️
We presented at the SEIA Utility Scale Power (USP) division’s monthly call on NERC’s CIP roadmap yesterday, and how the roadmap represents a paradigm shift in philosophy.
When CIP standards were first introduced, the strategy of securing large assets (+1500 MW) made sense. Not any more. 80% of the bulk electrical system is made up of assets categorized as low-impact or below. Low-impact no longer means low risk. Expect a sustained effort starting in May 2026 with eight standards kicking into effect for Category 2 IBRs, and ramping up over the next three years to secure the “ecosystem” - including CIP-003-11 on the horizon. View the CIP roadmap here.
Reply "Slide deck please" to this email if you would like the slides.
Product Updates 🚀
Features released this week:
API Keys
You can now create and maintain your asset inventories via integration. Org admins can now create and manage API keys to:
Create, read, update and delete cyber assets
Read facilities, control centers and cyber systems

Rich text editing
Edit your documentation more easily with the rich text editor. Create and edit tables, format text, add images. Add and delete new document sections, and manage drafts.
Calendar & Task Filtering
Filter by Facility, Control Center, Priority, Impact Level, Standard or Assigned User in task calendar view and when importing tasks.

Evidence Management
More control and better auditability of evidence documentation. New Actions for files:
View
Download
Edit metadata
Delete (recoverable for 90 days)
Plus file versioning and change history with timestamps.
Coming Soon
Training
Assign custom training modules to teams and track completion status across the org. Beta testing now available - reach out if you are interested.
Incidents
A dedicated place to document root cause and remediation plans.
Controls
Clear visibility into which controls are in place with linkage to tasks and evidence.
Join our mailing list.
Weekly industry insights, news, and product updates.
More News

Four IBR standards, four different compliance clocks
The ERO ran one-on-one IBR sessions with GOs and GOPs. PRC-028, 029, 030 and MOD-026.

Iranian actors in energy-sector PLCs + Nico knows your fleet
CISA and the FBI name Energy in their updated PLC advisory. Plus nine weeks to the ride-through wave.

FERC orders mandatory NERC standards for data centers
A July 16 FERC order gives NERC a year-end deadline to bring large loads under mandatory standards.