Written by: Sarojini Gude, Consultant
The CIP 100-Series Newsletter explains NERC’s proposed new CIP standards, which are intended to enable the compliant use of third-party cloud services and modern virtualized technologies in BES environments through risk based, outcome driven requirements.
The proposal preserves existing BES Cyber System concepts while introducing new standards such as CIP-102 and CIP-105 that focus on measurable security objectives rather than prescriptive architectures, allowing entities greater flexibility in implementing modern security controls.
Overall, the 100-Series is designed as an alternative, standalone CIP framework that achieves the same security outcomes as the current standards while supporting cloud adoption and future technology innovation. An informal comment period for the initial draft standards is open through August 21, 2026.
