North American Electric Reliability Corporation Critical Infrastructure Protection
The mandatory cybersecurity standards that protect the North American bulk electric system. They require utilities to identify critical cyber assets, control access, manage changes, and report incidents, with substantial fines for violations. They are among the few cybersecurity standards in the US that carry direct regulatory enforcement teeth.