Grid Cyber Rules Upgraded: Impact Levels Sorted!
Published Date: 3/24/2026
Notice
Summary
The North American Electric Reliability Corporation (NERC) just got the green light to roll out a new cyber security rule called CIP-002-8. This rule helps electric companies figure out which parts of their systems need the most protection from cyber threats by sorting them into low, medium, or high impact categories. Electric utilities need to start following this updated standard soon, helping keep our power grid safe without breaking the bank.
Analyzed Economic Effects
4 provisions identified: 2 benefits, 2 costs, 0 mixed.
New CIP-002-8 Brings Compliance Costs
The Commission approved Reliability Standard CIP-002-8, which requires about 1,673 U.S. entities on the NERC Compliance Registry to categorize bulk electric system cyber systems as low, medium, or high impact and follow related CIP rules. The order estimates 1,573 entities will incur a 2-hour paperwork increase at $97/hour (about $194 per entity) totaling $305,162 in year one, plus 100 entities will have 4 hours at $85/hour totaling $38,000, and an annual cost burden reported as $101,803 for each of Years 1–3.
Control Center Definition Expanded
NERC's approved change revises the NERC Glossary so a transmission owner is considered to have a 'control center' if it can control transmission facilities at two or more locations using SCADA (supervisory control and data acquisition). That expansion means some transmission owners may now fall under CIP requirements they did not before.
6,000 Threshold Sets Impact Levels
The standard sets a 6,000 aggregated weighted value threshold (based on voltage points for BES transmission lines a control center monitors) to distinguish medium-impact from low-impact control centers. This threshold and inclusion/exclusion rules change which control centers receive higher cybersecurity protections, which the Commission says advances Bulk Electric System reliability.
Implementation Timing Gives Transition Period
NERC's implementation plan makes CIP-002-8 effective on the later of the CIP-002-7 effective date or the first day of the first calendar quarter that is three calendar months after the Commission's approval order. NERC says this balances urgency with time for responsible entities to update their processes.
Personalized for You
How does this regulation affect your finances?
Personalize government policy and PRIA will tell you what this federal register document means for your household, plus every other regulation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.
Key Dates
Department and Agencies
Related Federal Register Documents
2026-16739, Venture Global CP2 LNG, LLC, Venture Global CP Express, LLC; Notice of Scoping Period Requesting Comments on Environmental Issues for the Proposed CP2 LNG Expansion Project, and Notice of Public Scoping Sessions
2026-16616, Regulatory Agenda
We are publishing our regulatory agenda (the Agenda) in accordance with Public Law 96-354, "The Regulatory Flexibility Act," and Executive Order 12866, "Regulatory Planning and Review." FERC's complete Agenda, available on OMB's website at https://www.reginfo.gov, is a compilation of all rulemaking activities on which we have recently completed action or have proposed or are considering action. Our last Agenda was provided in May 2025 and in this current agenda, we have listed 42 rulemaking activities. We also note that the Agency has one inactive rulemaking that is not listed in this Agenda. This issuance of our Agenda contains ten (10) Pre-Rules, eleven (11) Notice of Proposed Rules, eight (8) Final Rules, and thirteen (13) Completed activities. Four (4) rulemakings are Section 3(f)(1) Significant; two (2) are Other Significant; one (1) is a routine rulemaking activity; two (2) are administrative, and thirty-two (32) are Substantive, Nonsignificant rulemaking activities.
2026-16637, Combined Notice of Filings
The Federal Energy Regulatory Commission got new filings from several natural gas pipeline companies about rate changes and rule updates. These changes could affect pipeline rates starting as soon as July 9, 2026, and some compliance updates kick in January 1, 2027. If you want to speak up or get involved, you need to comment by late August 2026.
2026-16633, Columbia Gulf Transmission, LLC; Notice of Availability of the Environmental Assessment for the Proposed Maysville Project
2026-16525, Combined Notice of Filings
The Federal Energy Regulatory Commission got new filings from natural gas pipeline companies about their rates and refunds. These filings could change how much customers pay starting as soon as September 1, 2026. If you want to speak up or get involved, you need to act by mid to late August.
2026-16418, NorthWestern Corporation; Notice of Institution of Section 206 Proceeding and Refund Effective Date
Previous / Next Documents
Previous: 2026-05714, City of Tacoma, Washington; Notice of Application for Non-Capacity Amendment of License Accepted for Filing, Soliciting Comments, Motions To Intervene, and Protests
The City of Tacoma wants to make some changes to its Cushman Hydroelectric Project on the Skokomish River in Washington. These changes don’t affect how much power the project produces but might impact the environment or local communities. People have until April 20, 2026, to share their thoughts, join the discussion, or raise concerns—no money changes are involved right now.
Next: 2026-05717, Agency Forms Undergoing Paperwork Reduction Act Review
The CDC is asking for your thoughts on a new form they want to use to keep track of health resources. They’re giving everyone 30 more days to share ideas or concerns before the form gets final approval. This helps make sure the form is useful, easy to fill out, and doesn’t waste anyone’s time or money.