2026-11877NoticeWallet

FERC Extends Grid-Security Data Rules Without Much Drama

Published Date: 6/12/2026

Notice

Summary

FERC is extending its info collection rules for keeping our energy grid safe and secure, especially with updates to critical security standards (CIP-002-8). This affects energy companies who must keep sharing important data to protect infrastructure. Comments are open until July 13, 2026, so stakeholders have a chance to weigh in without any new fees or big changes in costs.

Analyzed Economic Effects

4 provisions identified: 0 benefits, 3 costs, 1 mixed.

Three-year extension of FERC-725B

FERC is seeking a three-year extension of the FERC-725B information-collection approval (OMB Control No. 1902-0248) to continue mandatory Reliability Standards reporting tied to Critical Infrastructure Protection (CIP). The submission specifically implements changes tied to Reliability Standard CIP-002-8, which the Commission approved on March 19, 2026.

Per-entity paperwork increase for many registrants

FERC estimates about 1,573 U.S. registered entities will incur a minor paperwork increase of 2 hours each (estimated cost $194 per entity) for CIP-002-8, and another 100 entities will incur 4 hours each (estimated cost $388 per entity). The two groups' one-time additional burdens total 3,146 hours ($305,162) and 400 hours ($38,800) respectively.

Aggregate compliance burden and cost reported

FERC reports the total burden for the FERC-725B renewal as 683,088 hours and a total estimated cost of $52,802,702.40. For the approved CIP-002-8 changes, FERC reports a one-time combined burden of 3,546 hours and $343,962, and an annual cost of $101,803 per year for Years 1–3.

CIP-002-8 revises categorization thresholds and control center term

The Commission approved Reliability Standard CIP-002-8 on March 19, 2026, which revises the threshold used by transmission owners and transmission operators to categorize their Bulk Electric System (BES) Cyber Systems and revises the NERC Glossary definition of 'control center'. These changes affect how entities identify which systems are subject to CIP cybersecurity requirements.

Personalized for You

How does this regulation affect your finances?

Personalize government policy and PRIA will tell you what this federal register document means for your household, plus every other regulation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.

Key Dates

Published Date
Comments Due
6/12/2026
7/13/2026

Department and Agencies

Department
Independent Agency
Agency
Energy Department
Federal Energy Regulatory Commission
Source: View HTML

Related Federal Register Documents

Previous / Next Documents

Back to Federal Register