Grid Cyber Rules Upgraded: Impact Levels Sorted!
Published Date: 3/24/2026
Notice
Summary
The North American Electric Reliability Corporation (NERC) just got the green light to roll out a new cyber security rule called CIP-002-8. This rule helps electric companies figure out which parts of their systems need the most protection from cyber threats by sorting them into low, medium, or high impact categories. Electric utilities need to start following this updated standard soon, helping keep our power grid safe without breaking the bank.
Analyzed Economic Effects
4 provisions identified: 2 benefits, 2 costs, 0 mixed.
New CIP-002-8 Brings Compliance Costs
The Commission approved Reliability Standard CIP-002-8, which requires about 1,673 U.S. entities on the NERC Compliance Registry to categorize bulk electric system cyber systems as low, medium, or high impact and follow related CIP rules. The order estimates 1,573 entities will incur a 2-hour paperwork increase at $97/hour (about $194 per entity) totaling $305,162 in year one, plus 100 entities will have 4 hours at $85/hour totaling $38,000, and an annual cost burden reported as $101,803 for each of Years 1–3.
Control Center Definition Expanded
NERC's approved change revises the NERC Glossary so a transmission owner is considered to have a 'control center' if it can control transmission facilities at two or more locations using SCADA (supervisory control and data acquisition). That expansion means some transmission owners may now fall under CIP requirements they did not before.
6,000 Threshold Sets Impact Levels
The standard sets a 6,000 aggregated weighted value threshold (based on voltage points for BES transmission lines a control center monitors) to distinguish medium-impact from low-impact control centers. This threshold and inclusion/exclusion rules change which control centers receive higher cybersecurity protections, which the Commission says advances Bulk Electric System reliability.
Implementation Timing Gives Transition Period
NERC's implementation plan makes CIP-002-8 effective on the later of the CIP-002-7 effective date or the first day of the first calendar quarter that is three calendar months after the Commission's approval order. NERC says this balances urgency with time for responsible entities to update their processes.
Personalized for You
How does this regulation affect your finances?
Personalize government policy and PRIA will tell you what this federal register document means for your household, plus every other regulation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.
Key Dates
Department and Agencies
Related Federal Register Documents
2026-20238, RamaFlux Sierra PSH, LLC; Notice of Preliminary Permit Application Accepted for Filing and Soliciting Comments, Motions To Intervene, and Competing Applications
RamaFlux Sierra PSH, LLC wants to study building a big 750-megawatt pumped storage hydroelectric project near Nevada City, California. This notice means they got the green light to explore the idea but can’t start building yet. People have until November 30, 2026, to share their thoughts, join the process, or suggest other project ideas.
2026-20217, Combined Notice of Filings
The Federal Energy Regulatory Commission got several filings from natural gas companies about new rates and reports. These changes mostly affect pipeline customers and could change prices starting November 1, 2026. If you want to share your thoughts, you have until October 13, 2026, to comment.
2026-20216, Combined Notice of Filings #1
The Federal Energy Regulatory Commission got several new filings from energy companies like Shell Energy and West Camp Wind Farm asking for approval on big projects and changes. These filings affect companies involved in power generation and trading, with deadlines for public comments coming up in mid-October. Some filings also include refund reports, hinting at possible money adjustments for customers.
2026-20105, The City of Columbus, Ohio; Notice of Application for Surrender of Exemption Accepted for Filing, Soliciting Comments, Motions To Intervene, and Protests
The City of Columbus, Ohio, wants to give up its special exemption for the O'Shaughnessy Dam Hydroelectric Facility on the Scioto River. This change could affect local energy rules and requires approval from environmental agencies, with public comments due by October 28, 2026. If you care about local energy or the environment, now’s the time to speak up!
2026-20106, Combined Notice of Filings
The Federal Energy Regulatory Commission got a bunch of filings from natural gas pipeline companies about changing their rates and agreements. These changes mostly take effect starting November 1, 2026, and could affect how much customers pay or how companies handle fuel and losses. If you’re involved with these pipelines, keep an eye on comment deadlines in early to mid-October to have your say!
2026-19984, Florida Gas Transmission Company, LLC; Notice of Request Under Blanket Authorization and Establishing Intervention and Protest Deadline
Florida Gas Transmission Company wants to lower the pressure on a big gas pipeline in Calhoun and Liberty Counties, Florida, to keep things safe and run smoother. This change helps meet safety rules and improve operations without extra costs to customers. If you care, you can speak up by October 20, 2026, to join the conversation or raise concerns.
Previous / Next Documents
Previous: 2026-05714, City of Tacoma, Washington; Notice of Application for Non-Capacity Amendment of License Accepted for Filing, Soliciting Comments, Motions To Intervene, and Protests
The City of Tacoma wants to make some changes to its Cushman Hydroelectric Project on the Skokomish River in Washington. These changes don’t affect how much power the project produces but might impact the environment or local communities. People have until April 20, 2026, to share their thoughts, join the discussion, or raise concerns—no money changes are involved right now.
Next: 2026-05717, Agency Forms Undergoing Paperwork Reduction Act Review
The CDC is asking for your thoughts on a new form they want to use to keep track of health resources. They’re giving everyone 30 more days to share ideas or concerns before the form gets final approval. This helps make sure the form is useful, easy to fill out, and doesn’t waste anyone’s time or money.