Effective date of FERC Order No. 907, which approved CIP-015-1 (INSM). For FERC-jurisdictional entities, NERC lists CIP-015-1 compliance from Oct 1, 2028 and CIP-015-2 (approved Aug 10, 2026) from Oct 1, 2029, with later phases on Oct 1, 2030 and Oct 1, 2031
Sep 2, 2025observed
| Value kind | observed — Reported measurements, counts, and specifications keep the precision and scope stated by their source; an exact specification is not treated as a range. |
|---|---|
| Scope | Sep 2, 2025 is the effective date of FERC Order No. 907, not a compliance date. CIP-015-1 applies to Control Centers and backup Control Centers from Oct 1, 2028. CIP-015-2 replaces CIP-015-1 on Oct 1, 2029 and adds the associated EACMS and PACS and supporting shared cyber infrastructure at those centers. The remaining medium-impact BES Cyber Systems with external routable connectivity, their protected cyber assets and supporting shared cyber infrastructure follow on Oct 1, 2030; their associated EACMS and PACS follow on Oct 1, 2031. Dates are for FERC-jurisdictional entities; other jurisdictions set their own. |
| As of | 2026-08 |
| Source | FERC Order No. 907; Federal Register; NERC Standards & Compliance Bulletin (2026-08-31); CIP-015-2 implementation plan · FERC Order No. 907: Federal Register p. 28889 (DATES) and p. 28898 (Section VII), effective September 2, 2025; NERC bulletin of 2026-08-31, printed p. 5, for effective dates; CIP-015-2 implementation plan pp. 2-4 and FAQ p. 3 for the phases |
| Review | checking…review by 2027-06-01 · standard cadence |
| Recorded changes | last 2026-10-13 · 2 revisions tracked |
| Claim id | cip-015-insm-effective-date-phased-compliance |
Where the guide uses it
← Full numbers register — every date-stamped figure in the guide, with revision history.