Article

The NERC Risk Management for Third-Party Cloud Services Standards Drafting Team is facing criticism for its approach to revising CIP standards, which may hinder compliance for electric utilities transitioning to cloud systems. A recent assessment highlights that existing definitions from 2011-2012 do not adequately encompass cloud technologies, prompting proposals for key changes to improve clarity and compliance. Without these adjustments, the team's current strategy risks delaying the implementation of effective cloud standards.