Short, practical posts from the GridSafe Team on impact ratings, low-impact plans, evidence and audits at solar, wind and battery storage sites. New posts every Tuesday and Thursday.
A step-by-step plan for moving a NERC CIP program from spreadsheets and shared folders to a system of record, without losing the evidence you already have.
When a battery site is under NERC CIP, it is usually low impact. What CIP-003-9 asks of a BESS, and the vendor access paths that need the most care.
Most CIP generation sites are low impact, so CIP-003-9 Attachment 1 is the program, not CIP-005/007/010. Here is what that changes about tooling.
CIP-007-6 covers ports, patches, malware, logs and passwords for high and medium impact systems. What each part asks, and when a solar site is in scope.
FERC staff's 2026 CIP audit report names three lessons: late registration of new generation, aggregated control, and AI tools. What to check now.
Since May 15, 2026, Category 2 solar, wind and storage owners follow eight NERC standards. CIP is not one of them yet. What applies, and what to do now.
A free 30-point checklist helps newly registered Category 2 owners apply NERC's Security Guideline for Inverter-Based Resources, site by site.
Registration, impact rating, the CIP-003 low-impact plan and the evidence behind it — the order to work in when a solar portfolio comes into NERC CIP scope.
Five places operators of solar, wind and storage misread CIP-002 — and what each mistake costs in requirements you did or did not need to meet.