Ampyx Cyber Blog

The Intersection of Regulation & Resilience

What Multi-Region Entities Need to Know About Coordinated Oversight in 2026 [Updated]
Policy Pulse Patrick Miller Policy Pulse Patrick Miller

What Multi-Region Entities Need to Know About Coordinated Oversight in 2026 [Updated]

NERC's Coordinated Oversight Program lets multi-region entities consolidate compliance monitoring under one Lead Regional Entity, eliminating duplicate audits across six footprints. New for 2026: Category 2 GO/GOP eligibility opens May 15, annual asset verification becomes formal, periodic group reviews go standard. Breakdown of qualifications, modification paths, and audit prep questions.

Read More
Funded, Not Secured: The April 20 DPA Determinations & the Bulk Electric System
Policy Pulse Patrick Miller Policy Pulse Patrick Miller

Funded, Not Secured: The April 20 DPA Determinations & the Bulk Electric System

Two April 20 Defense Production Act determinations expand domestic capacity for grid components and large-scale energy infrastructure. Neither addresses cybersecurity. For the electric sector, NERC CIP and Order 693 standards still apply. A practitioner's view of intersections with CIP-013, CIP-014, PRC, FAC, and TPL, and why domestic capacity is not domestic assurance.

Read More
20 years of NERC CIP - What's next?
Policy Pulse Patrick Miller Policy Pulse Patrick Miller

20 years of NERC CIP - What's next?

Two industry veterans who cultivated NERC CIP over the past 20 years discuss how it all started, and what’s next for electric power industry security regulations. Patrick C. Miller, one of the first NERC CIP auditors in the country, and Carter Manucy, a utility IT/OT Security Director, talk about the regulation that changed the electric sector cybersecurity landscape forever.

Read More