NERC-CIP Readiness: Using a results-based approach, NERC develops a set of CIP Standards that require utilities to establish a set of standard security measures. These standards focus on performance, entity capabilities, and risk management. The goal of these set of standards is to provide heightened security to the BPS by providing required security measures.

When it comes to cybersecurity, NERC CIP currently is the mandatory requirement with which the electric utilities must comply. These are related to the operations and are mostly outside the customer data privacy consideration.