Preparing for NERC CIP-015

Chart

Are You Ready for NERC CIP-015?

As electric grid environments become more interconnected, attackers are increasingly moving inside operational networks after initial access. 

 

Evolving requirements such as NERC CIP-015 are now driving the need for visibility into internal communications within the Electronic Security Perimeter (ESP) not just at the perimeter.

 

Check out our expert-led session to understand what this means in practice. 

Developments such as NERC CIP - 015 reinforce the need for stronger visibility into communications inside operational networks, recognizing that threats often move laterally after gaining initial access.

— TrendAI™, 2026 Q2

Chart

Blog: Why East-West Visibility Matters for Grid Security

Electric power infrastructure is becoming more connected than ever before. Organizations responsible for operating the Bulk Electric System (BES) are increasingly integrating operational technology (OT), industrial control systems (ICS), and enterprise IT environments to support automation, remote operations, and grid modernization.

 

Learn how east-west traffic visibility helps detect and stop lateral movement attacks inside electric grid infrastructure and critical OT networks.

Chart

A Practical Blueprint for NERC CIP-015 Internal Network Security Monitoring

Turn NERC CIP-015 requirements into a practical, deployable architecture.

 

This blueprint provides a clear reference model for implementing internal network monitoring across Bulk Electric System (BES) environments. It maps how to gain visibility inside the Electronic Security Perimeter (ESP), detect lateral movement, and align security operations with evolving compliance expectations.

 

What you’ll get:

  • A layered reference architecture aligned to NERC CIP-015

  • Guidance on where to deploy monitoring across IT and OT environments

  • Visibility into east-west traffic within the ESP

  • A practical view of detection, investigation, and response workflows

  • A framework to support both security outcomes and audit readiness