NERC CIP — Critical Infrastructure Protection Reliability Standards (North American bulk electric system)

NERC CIP — Critical Infrastructure Protection Reliability Standards (North American bulk electric system) — 40% of in-scope requirements covered.

5 requirements · 5 in scope (3 designed · 2 advisory). The 40% is weighted over the in-scope base.

NERC CIP: requirement → the KYE™ artefact that enforces it

Demo data

You learn: Which requirements KYE™ enforces at runtime and with which artefact. You can: Walk the requirements.

  1. r4 · designed

    Access management — authorized personnel for cyber-physical actions

    Rule packs: kye:rule-pack:industrial-asset-integrity · Constitution: 12 purpose permission

  2. r1 · designed

    System security management — controlled actuation of BES assets

    Rule packs: kye:rule-pack:industrial-asset-integrity · Constitution: 25 edge governance

  3. r1 · designed

    Incident response — contestable and evidenced decisions

    Rule packs: kye:rule-pack:industrial-asset-integrity · Audit events: kye.evidence.pack.v1 · Constitution: 21 delegated auditability

  4. r1 · advisory

    BES Cyber System categorization by impact

    Constitution: 25 edge governance

  5. r1 · advisory

    Information protection — evidence record integrity

    Audit events: kye.evidence.pack.v1 · Constitution: 30 audit worm retention

How this widget is built
Demonstrates
KYE™ Compliance Mapping Rail™
Components
  • Framework requirement (clause)
  • Coverage status
  • KYE™ enforcement artefact (event, decision-record field, Evidence Pack™ entry)
Flow
Clause → status → the KYE™ artefact that enforces it, enforced requirements first. Architecture diagram
Used on

Source: NERC Critical Infrastructure Protection (CIP) reliability standards governing cyber security of the North American bulk electric system (BES Cyber Systems). KYE™ governs the authority, evidence and finality of an AI-recommended physical-safety action on grid/power assets and the scope boundary of the AI's authority; KYE™ does not replace the registered entity's CIP compliance program. Starter requirement set (Wave-Ralph-Industrial); deepen by graft. · License: NERC standards are public; KYE™ registry cites the standard + requirement identifier for mapping purposes.

By category

CategoryReqsEnforcedDesignedAdvisoryDeferredCoverage
CIP-002 — BES Cyber System Categorization1001025%
CIP-004 — Personnel & Training1010050%
CIP-007 — System Security Management1010050%
CIP-008 — Incident Reporting and Response1010050%
CIP-011 — Information Protection1001025%

Every requirement → the KYE™ artefact that enforces it

IDTitleStatusKYE™ enforcement
nerc-cip.cip-002-5.1a.r1BES Cyber System categorization by impactadvisorydictionaries: internal
constitution_refs: constitution/25-EDGE-GOVERNANCE.md
nerc-cip.cip-004-6.r4Access management — authorized personnel for cyber-physical actionsdesignedrule_packs: kye:rule-pack:industrial-asset-integrity
dictionaries: internal
constitution_refs: constitution/12-PURPOSE-PERMISSION.md
nerc-cip.cip-007-6.r1System security management — controlled actuation of BES assetsdesignedrule_packs: kye:rule-pack:industrial-asset-integrity
constitution_refs: constitution/25-EDGE-GOVERNANCE.md
nerc-cip.cip-008-6.r1Incident response — contestable and evidenced decisionsdesignedrule_packs: kye:rule-pack:industrial-asset-integrity
audit_events: kye.evidence.pack.v1
constitution_refs: constitution/21-DELEGATED-AUDITABILITY.md
nerc-cip.cip-011-3.r1Information protection — evidence record integrityadvisoryaudit_events: kye.evidence.pack.v1
constitution_refs: constitution/30-AUDIT-WORM-RETENTION.md

Canonical KYE™ surfaces referenced on this page: KYE Protocol™.