Ampyx Cyber Blog

The Intersection of Regulation & Resilience

What Multi-Region Entities Need to Know About Coordinated Oversight in 2026 [Updated]
Policy Pulse Patrick Miller Policy Pulse Patrick Miller

What Multi-Region Entities Need to Know About Coordinated Oversight in 2026 [Updated]

NERC's Coordinated Oversight Program lets multi-region entities consolidate compliance monitoring under one Lead Regional Entity, eliminating duplicate audits across six footprints. New for 2026: Category 2 GO/GOP eligibility opens May 15, annual asset verification becomes formal, periodic group reviews go standard. Breakdown of qualifications, modification paths, and audit prep questions.

Read More
How CMEP Version 8 Reshapes NERC’s Compliance Model
Policy Pulse Patrick Miller Policy Pulse Patrick Miller

How CMEP Version 8 Reshapes NERC’s Compliance Model

The CMEP Version 8 does not rewrite NERC compliance, rather it stabilizes it. Building on years of evolution, the updated Manual reinforces risk-based oversight, professional judgment, technical competence, and enterprise consistency across all Reliability Standards. The result is a more mature, defensible compliance model that shapes how audits, enforcement, and reliability governance now operate.

Read More
Strategic Value of Self-Reporting in NERC CIP Compliance
Deep Dive Patrick Miller Deep Dive Patrick Miller

Strategic Value of Self-Reporting in NERC CIP Compliance

Self-reporting in NERC CIP isn’t a weakness. It’s a sign of maturity. Proactive disclosures build regulatory trust, reinforce internal controls, and empower compliance teams to improve. When done right, self-reporting signals ownership, not failure, and positions your program as resilient, transparent, and credible.

Read More
20 years of NERC CIP - What's next?
Policy Pulse Patrick Miller Policy Pulse Patrick Miller

20 years of NERC CIP - What's next?

Two industry veterans who cultivated NERC CIP over the past 20 years discuss how it all started, and what’s next for electric power industry security regulations. Patrick C. Miller, one of the first NERC CIP auditors in the country, and Carter Manucy, a utility IT/OT Security Director, talk about the regulation that changed the electric sector cybersecurity landscape forever.

Read More
How it started, where it's going: 20 years of NERC CIP
Policy Pulse Patrick Miller Policy Pulse Patrick Miller

How it started, where it's going: 20 years of NERC CIP

Two key people who helped start NERC CIP 20 years ago talk about how and why it came together, and where it could go next. Patrick C. Miller, one of the first NERC CIP auditors in the country, and Earl Shockley, a former leader at NERC, talk about this momentous regulation that changed the electric sector cybersecurity landscape forever.

Read More