Federal Register #RD26-6-000

FERC seeks comments on updated Critical Infrastructure Protection information-collection requirements

FERC is seeking public comments on an information-collection update for Critical Infrastructure Protection reliability standards, not soliciting products or services. - Government buyer and office: U.S. Department of Energy (DOE), Federal Energy Regulatory Commission (FERC). No specific FERC office is identified. - Named organization: North American Electric Reliability Corporation (NERC), the Commission-certified Electric Reliability Organization that petitioned for approval of the updated standard. No OEMs, product vendors, or resellers are identified. - Requested change: Transition from Reliability Standard CIP-015-1 to CIP-015-2 under docket RD26-6-000. The updated standard extends internal network security monitoring requirements to certain electronic access control or monitoring systems and physical access control systems outside the electronic security perimeter. - Estimated reporting burden: FERC estimates 360 entities will face an increased burden, involving 2,160 annual responses and 30,240 total hours per year. The estimated annual burden cost is $4,097,822.40; this is not a procurement contract value. - Products and services: None requested; no product quantities or part numbers are provided.

Description

The Federal Energy Regulatory Commission is requesting public comments on the currently approved FERC-725B information collection concerning Mandatory Reliability Standards for Critical Infrastructure Protection. The update replaces Reliability Standard CIP-015-1 with CIP-015-2, reflecting changes implemented through Order RD26-6-000 issued August 10, 2026. The updated standard extends internal network security monitoring requirements to certain electronic and physical access control systems outside the electronic security perimeter. Comments are due December 14, 2026.

View original listing