← Frameworks / Energy Regulation

FERC Orders Directing NERC CIP Standard Development

Federal Energy Regulatory Commission orders directing NERC to develop and modify Critical Infrastructure Protection reliability standards for the Bulk Electric System. Key orders include Order 706 (mandatory CIP standards), Orders 829/850 (supply chain risk management including EACMS/PACS), Order 881 (internal network security monitoring), Order 887 (virtualization and cloud), Order 888 (low-impact BES enhancements), Order 2222 (DER cybersecurity), and Order 893 (incentive-based rate treatment). Represents the regulatory policy layer driving NERC CIP standard evolution.

Clauses: 8
Avg Coverage: 69.6%
Publisher: Federal Energy Regulatory Commission (FERC) Version: 2006-2024
FERC CIP Orders → SP 800-53 SP 800-53 → FERC CIP Orders Coverage Analysis
Clause Title SP 800-53 Controls
Order 706 Mandatory Reliability Standards for CIP
PM-01 PM-02 PM-09 PL-01 PL-02
Order 829 Supply Chain Risk Management
SR-01 SR-02 SR-03 SR-05 SR-06 SA-04 SA-09 SA-22 CM-14
Order 850 Supply Chain Enhancements (EACMS/PACS Expansion)
SR-01 SR-02 SR-03 SR-06 SR-11 PE-03 AC-02 IA-02
Order 881 Internal Network Security Monitoring (INSM)
SI-04 CA-07 SC-07 AU-06 SC-48 IR-04
Order 887 Virtualization and Cloud for BES Cyber Systems
SC-07 AC-04 CM-02 CM-07 SC-02 SC-39
Order 888 CIP Low-Impact BES Cyber Systems Enhancements
AC-01 AT-01 AT-02 PE-01 PE-03 IR-01 IR-04
Order 893 Incentive-Based Rate Treatment for CIP Cybersecurity Investment
PM-01 PM-09 PM-14 CA-07
Order 2222 DER Cybersecurity for Wholesale Market Participation
AC-04 SC-07 IA-03 IA-09 SC-08 PM-11