The grid is growing faster than ever and NERC is modernizing to keep pace

The growth of the grid is accelerating. AI data center demand is booming, IBRs are scaling faster than ever and virtual power plants are rewiring how loads are managed. Because of this we are seeing comprehensive changes to compliance frameworks in order to stay ahead of emerging risks. CIP virtualization standards are coming, NERC is considering the impact of data centers on the grid, inverter-based resources will get written into more standards, and so on…

That’s a lot of standards. It’ll take years before they take effect, right?

Maybe not.

Last week, NERC took a big step forward to modernize how reliability standards are drafted and implemented. We expect this to come into full effect over the next 12-18 months, and it’ll have compounding effects. More below.

In product news, we launched our new Training feature! Stay on top of CIP-003 (low-impact) and CIP-004 (medium- and high-impact) with reusable training modules and track completion.

Industry Update ⚡️

NERC developed a task force in February 2025 to overhaul the Reliability Standard development process. Last week they accepted that task force’s recommendations on overhauling the initiation, drafting and balloting of new standards. In order to support this, NERC is dedicating more staff and resources to drafting standards and term sheets.

What this means for you: In January we covered the release of the CIP Roadmap, which points to an expansion of cybersecurity scope for IBRs. The modernization to the standards development process means that IBRs and Low Impact facilities are going to have higher regulatory scrutiny sooner than later. We recommend conducting an asset inventory on all facilities now so you have a clear path to implementing updates to your controls and policies as standards changes are formally announced.

See NERC’s Resource Page for the modernization task force details.

Product Updates 🚀

Training modules available in Beta

Low-impact GOs and GOPs have to document and implement a cyber security awareness program and reinforce those practices every 15 calendar months. Medium-impact folks have to have a security awareness program, cyber security training program and personnel risk assessment program.

The Training module in Raptor Comply allows Training Administrators to create, assign and modify training modules with mixed media, assign based on roles and access and track individual completion status.

Compliance Resources 🛠️

NERC recently published a roadmap for Critical Infrastructure Protection (CIP) standards. The CIP Roadmap signals a seismic shift in how grid security will be regulated.

On February 5th, Peter Stovall joined SEIA’s Utility-Scale Solar Power Division monthly call to break down what this means for owners and operators of renewable assets.

Access the full recording here.