NERC CIP
Bootcamp
Boost Your CIP Compliance
Power up your security and compliance mastery with Ampyx Cyber’s NERC CIP Bootcamp Course. Designed for all professionals in the energy sector, this immersive, in-person only, 3.5-day training program offers a comprehensive foundation and thorough deep dive into the North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) standards. Become a recognized leader in critical infrastructure protection with the CIPC Certification, your key to advancing in the cybersecurity and compliance fields.
Rayburn Electric Cooperative Campus and Training Facility, Rockwall, TX
Why Choose Our NERC CIP Bootcamp?
Expert-Led Training
Learn from an industry veteran with years of experience in developing, implementing, auditing, and consulting on NERC CIP standards. Our instructor brings real-world insights and practical solutions to complex compliance challenges. The course is created and instructed by Patrick Miller, one of the original architects of the NERC CIP Standards and the first CIP auditor in North America (see below for experience).
Always current and Comprehensive Curriculum
Our course covers all aspects of NERC CIP, from the fundamentals to advanced topics, including BES Cyber Asset identification, CIP-specific cybersecurity approaches, physical security, incident and recovery planning, as well as regulatory perspectives and what to expect in your audit. The content is tailored to meet the needs of IT, OT, engineering and field professionals, compliance officers/managers, and security practitioners. Our curriculum ensures you gain a deep, practical understanding of all essential components so you can do your job confidently. Our key differentiator from other courses: we keep the course material fresh and updated with everything moving in the entire NERC CIP universe. Your course will have the latest information right up to the first day of class so you can prepare for what’s next while everyone else is still reacting.
Electric Sector Regulatory Overview
Governance & Structure
Intro to Reliability Standards
Implementation Plans
Glossary of Terms and Acronyms
CIP-002 (determine impact rating)
CIP-003 (Attachment 1; all low impact requirements)
CIP-004 through CIP-014 (high/medium impact)
CIP-015 INSM deep dive
Sustainable Compliance
Preparing for, and surviving, an audit
CMEP (Compliance Monitoring and Enforcement Program)
Internal Controls
Regulatory Forecast (including all standards submitted to FERC and pending approval)
Virtualization
CIP-002-8
CIP-003-11
CIP-008-X (Project 2022-05)
100-series (Third-party and Cloud) standards
CIP Roadmap
Adjacent and influencing regulations and standards
Interactive Learning Experience
Hear actual case studies, engage in hands-on exercises, and collaborate in workshops that mimic real-life scenarios. Our interactive format not only enhances your learning experience but also prepares you to immediately apply your knowledge effectively in your organization.
Networking Opportunities
Our bootcamp is not just about enhancing your skill set. It's also an opportunity to build your professional network. As we go through the course material, you'll be surrounded by peers from similar and diverse backgrounds contributing their perspective, knowledge, and questions. This environment fosters not only immediate upskilling but also long-term collaborations and connections. By participating, you gain access to a community eager to exchange ideas, challenges, and solutions, thereby enriching your professional journey and opening doors to new possibilities.
Continuing Education & CPE Credit
All participants in the class will receive a Certificate of Completion valid for 28 hours of CPE credit. Additionally, you can validate your expertise in NERC CIP standards with the CIPC Certification. This credential equips you with the skills to protect critical infrastructure and positions you as a leader in the field. Elevate your professional profile and unlock new career opportunities in the rapidly evolving energy sector.
SANS/GIAC (GCIP), ISC2 (CISSP), ISACA (CISA, CISM, CRISC), and others: these programs accept self-reported continuing professional education from relevant external training. Attendees receive a certificate of completion documenting the instruction hours, which can be submitted toward the credential's CPE requirement. Because the content overlaps, the same hours may count toward more than one credential you hold. We provide the completion certificate and hours documentation. Each certifying body sets its own rules, so final acceptance rests with that body and the credential holder's submission.
We are currently pursuing NERC Continuing Education Provider recognition so that system operators who attend the NERC CIP Bootcamp can put their time toward NERC credential maintenance. We will announce availability once recognition is granted.
Who Should Attend?
Our NERC CIP Bootcamp is ideal for:
Energy sector professionals seeking to deepen their understanding of NERC CIP standards.
Compliance officers, managers, and regulatory affairs specialists aiming to enhance their expertise.
Internal Audit staff adding the NERC CIP controls to their suite of frameworks.
IT and OT security practitioners focusing on safeguarding critical infrastructure (we’re fluent in both cyber and physical security).
Engineering and field technicians who work with these systems on a daily basis.
Anyone aspiring to build a career in the energy sector's regulatory compliance and cybersecurity landscape.
Transform Your Career and Organization
With cybersecurity threats on the rise and regulatory requirements evolving, there's never been a more critical time to ensure your skills and knowledge are up to date. Our NERC CIP Bootcamp equips you with the tools, insights, and confidence to navigate the complexities of compliance, enhance your organization's security posture and contribute to the reliability and resilience of the energy grid.
About the Class
location, equipment, duration, timing, and format:
Your laptop or tablet is necessary, can be work or personal, no software will be installed
Class duration is 3.5 days, Tuesday through Friday
Each day will run from (around) 8:30-4:30, except Friday, which will run until 12:00pm/noon-ish
Format is classroom style
Hotel is the SpringHill Suites Dallas Rockwall - click here for discounted room rate
Hotel discount link expires on July 10, 2026
Breakfast and lunch is provided each day of class
Breakfast begins as early as 7:00am and class starts at 8:30am
Lunch usually begins around 12:00pm/noon and runs for an hour
Printed workbook provided with full course material (all slides) and space for notes
Multiple breaks throughout the day
Internet will be provided during class
Certificate of completion valid for 28 hours of CPE credit will be provided for attendees who attend the full class
Three (3) CIPC certification exam attempts are provided upon completion of course (not transferrable to any other person/party)
About Your Instructor
Patrick C Miller was one of the original architects of the NERC CIP Standards, beginning as early as 2002 with the Critical Infrastructure Protection Advisory Group (CIPAG). Below are just some of the many ways Patrick has participated in, and contributed to, the NERC CIP ecosystem:
Former instructor and content developer for various NERC CIP educational programs (EnergySec, SANS ICS 456)
One of the original architects of the NERC CIP standards
First official NERC CIP auditor in North America for any Regional Entity (RRO)
Created and established the first of any Regional Entity (RRO) NERC CIP program, for the Western Electricity Coordinating Council (WECC) as Manager, CIP Audits and Investigations
Original contributor and author of NERC’s Audit Manual and training content
Drafting teams for Urgent Action Standard (UAS) 1200
Drafting teams for NERC CIP versions 1, 2, and 3
Drafting teams for multiple formal NERC CIP Interpretations
Submitted and received FERC Ordered Request for Interpretation (RFI) for CIP-007
Original participant in the Electricity Subsector Information Sharing and Analysis Center (ES-ISAC), the precursor to today’s E-ISAC - including participation in the first Hydra teams (Aurora/Boreas)
Led the implementation of NERC CIP versions 1-3 at a very large, vertically integrated utility in the Pacific NW
Multiple roles within the NERC Critical Infrastructure Protection Committee (CIPC)
Contributor to the NERC Control Systems Working Group (CSSWG)
Contributor to the NERC System Planning Impacts from Distributed Energy Resources Working Group (SPIDERWG)
Contributor to the NERC Security Integration and Technology Enablement Subcommittee (SITES)
Contributor to the NERC Supply Chain Working Group (SCWG)
Contributor to the NERC Cloud Technical Advisory Group (CTAG)
Participant in multiple FERC Technical Committees specific to NERC CIP
Participant and guest speaker in the WECC Western Interconnection Compliance Forum (WICF)
Participant and guest speaker in the Midwest Reliability Organization (MRO) Security Advisory Council (SAC)
Participated in or led over 50 NERC CIP audits in all NERC Regions (NPCC, RF, SERC, MRO, TexasRE, WECC; as well as former Regions SPP and FRCC)
President emeritus, founder, and former director of EnergySec
Deep experience in NERC CIP violation processing and settlement negotiations
Participated in Canadian CIP audits and compliance programs in Quebec, Ontario, Alberta, and British Columbia
Participated in reviews and implementation of NERC CIP Standards (or local adaptations thereof) in Columbia, Ecuador, Peru, Chile, and Argentina.
Current and former certifications: CIPC, GCIP, CISSP, ISSAP, SSCP, CISA, CRISC, DHS-CVI, CEH, NSA-IAM, SCP, TCP
Tuition
The NERC CIP Bootcamp is $1,899 per person and includes the course, the course workbook, and three attempts at the CIPC certification exam. Registration and payment are completed in advance through our registration page
Cancellations, Refunds, and Substitutions
Cancel three or more weeks before the event for a full refund. Cancellations within three weeks of the event receive a 50 percent refund, which reflects nonrecoverable venue, lodging, and meal costs. If we cancel a session, you receive a full refund. Substitutions are welcome at any time before the course. Contact us here.
Get CIPC Certified
Elevate your expertise with the Critical Infrastructure Protection Credential (CIPC): Ampyx Cyber now offers the Critical Infrastructure Protection Credential (CIPC), a comprehensive certification designed for professionals seeking to demonstrate mastery of the NERC CIP standards. Developed by industry experts, this credential not only validates your knowledge but also equips you with the skills necessary to protect critical infrastructure from emerging threats. Join the elite group of certified professionals and advance your career by getting the CIPC certification today.
Get Notified About Upcoming Classes
Can’t make it to the next scheduled class? Sign up to get notified when the next class is available to secure your spot in our upcoming NERC CIP Bootcamp Course. Elevate your professional journey, contribute to your organization's success, and play a pivotal role in securing the energy sector's future.
Are You Interested in an International Class?
We’ve received requests from Canada, South America, and Europe and we would be delighted to bring a CIP Bootcamp to you! Let us know if you would like an international class in your country/region. We need around 15-20 people to make it feasible. Contact us to get on the list.
Book a Private Course for Your Company
If you have at least 10 people you’d like to take the class, we can hold a private course for you.
Cost Savings
Discounted per seat costs. Ticket price is lower because you are providing the facility.
No travel or lodging expenses. Eliminates airfare, hotel, and per diem costs for each participant.
Reduced downtime. Attendees spend less time away from work and family, avoiding multi-day travel.
Larger team participation. You can train more staff at once for a fraction of the cost of sending them individually.
Team Cohesion
Cross-department participation. Operations, compliance, cybersecurity, and engineering can attend together to build a shared understanding.
Consistent knowledge base. Everyone hears the same explanations and interpretations, reducing internal misalignment.
Improved communication. Working through mock audits and scenarios together strengthens interdepartmental collaboration.
Operational Continuity
Minimal disruption. Team members can step away as needed for urgent operational issues.
No shift coverage strain. Easier to accommodate shift workers or 24/7 operations without backfilling multiple days away.
Familiar environment. Training takes place in a comfortable, known setting that supports focus.
Frequently Asked Questions
Will the NERC CIP Bootcamp count toward my NERC continuing education?
Not yet, and we will not say otherwise until it is true. Ampyx Cyber is pursuing recognition as a NERC Continuing Education Provider. Once NERC grants recognition, operators who hold a NERC System Operator credential will be able to earn Continuing Education Hours for attending. We will announce it here when recognition is in place.
Is the CIPC credential a NERC credential?
No. The Ampyx CIPC credential is our own certificate, earned by completing the bootcamp and passing the CIPC exam. It is separate from the NERC System Operator Certification. Continuing education recognition, once granted, would let the bootcamp count toward a NERC operator's credential maintenance; it does not change what the CIPC credential is.
Who would the continuing education hours apply to?
Only attendees who separately hold a NERC System Operator credential. Every attendee earns the Ampyx certificate of completion and is eligible for the CIPC credential regardless.
Testimonials
I recently completed the Ampyx Cyber NERC CIP Boot Camp and loved the opportunity to dive deeper into CIP-002 through CIP-015, internal controls, and the current compliance landscape. It's always valuable to revisit these topics from an audit perspective, especially as expectations around evidence, controls, and risk continue to rapidly evolve.
Thank you to Patrick C. Miller for a highly practical and well-executed boot camp. You kept everyone engaged throughout the week, and your real-world stories made the material even more impactful. I look forward to continuing to apply these insights to support clients through audits, risk assessments, and ongoing compliance efforts.