First Things RFirst: November 2025
Expert analysis for a more reliable, secure and resilient electric grid, plus news and updates for RF stakeholders.
Insights & Analysis
The Lighthouse: CIP low impact from the ground up – Part 8, Developing your low impact cyber security plans
In Part 8 of Lew Folkerth’s series exploring the NERC CIP Standards applicable to low impact BES Cyber Systems, he turns his focus to cyber security plans.
The Lighthouse: CIP low impact from the ground up – Part 8.1, Developing your security awareness plan
In Part 8.1 of Lew Folkerth’s series exploring the NERC CIP Standards applicable to low impact BES Cyber Systems, Lew tackles Section 1 of NERC Reliability Standard CIP-003-9 (Security Management Controls) Attachment 1, which covers cyber security awareness.
Regulatory Affairs: Grid reliability news we’re tracking
The latest regulatory headlines we’re tracking include:
- FERC issues Order 912 directing additions to CIP supply chain risk management standards
- FERC holds annual Reliability Technical Conference
- FERC issues Lessons Learned Report from FERC-led CIP audits
News & Updates
NERC publishes Winter Reliability Assessment
NERC’s 2025–2026 Winter Reliability Assessment finds that much of North America is again at an elevated risk of having insufficient energy supplies to meet demand in extreme operating conditions. Although resources are adequate for normal winter peak demand, any prolonged, wide-area cold snaps will be challenging. This is largely due to rising electricity demand, which has grown by 20 GW since last winter, significantly outpacing winter on-peak capacity. This, coupled with the changing resource mix, is affecting the winter outlook.
Lessons Learned from Certification Activities
The ERO Enterprise shared a presentation on lessons learned from regional certifications at the NERC Organization Registration and Certification Subcommittee (ORCS) meeting in July. Some of the key points from the presentation included:
Energy Management Systems (EMS) changes:
- Communicate clearly with vendors and emphasize important specifications when upgrading your EMS. A lack of communication can lead to slow response to challenges, which are sometimes also due to vendor resource issues.
- Have a contingency plan for any EMS features that the vendor cannot provide.
- Make sure that critical documentation is in place including any needed internal controls.
Control Center changes:
- Plan for the possibility that Control Center construction companies may not be reliable when it comes to meeting deadlines, such as go-live dates, potentially due to supply chain issues or other challenges.
- Ensure applicable NERC CIP Standard Requirements are in place such as Electronic Security Perimeters, Physical Security Perimeters, etc.
Preparation for certification activities:
- Communicate future changes with your Regional Entity early, i.e. if you know a project such as an EMS change is taking place, notify RF (and other regions if you are a Multi-Regional Registered Entity [MRRE]) at least one year prior to implementation. (See Certification Annual Reminder to RF Entities for more information)
- Engage with your Regional Entity as early as possible to allow time to perform the activity in accordance with the NERC Rules of Procedure and ensure certification approval meets your needs for implementation. (See Certification Activity Presentation for more information)
To share feedback with our team, including lessons learned to improve our process, or for any questions about certifications, email entityengagement@rfirst.org. Questions can also be submitted through RF’s Assist Visit Program.
For more information on the Certification Process, see ROP App. 5A, Sections IV and V. Additional information is also available on our website here. Please fill out and submit an application to entityengagement@rfirst.org when planning a change, per ROP App. 5A, Sec. V.
Upcoming Events
Dec. 15, 2-3:30 p.m. ET | Tech Talk with RF
Save the date for our December edition of Tech Talk with RF on Monday, Dec. 15! Stay tuned for agenda details to be posted on our website calendar and LinkedIn feed.
Feb. 23-25, 2026 | RF Internal Controls Workshop
Join ReliabilityFirst on Feb. 23-25 in Cleveland for a dynamic and engaging Internal Controls Workshop that kicks off a power packed week focused on Compliance Monitoring (CIP and O&P) and Enforcement.
This interactive experience features small group discussions, opportunities to share industry insights, and a flexible format that lets you choose your own learning tracks. Whether you prefer to explore a variety of topics or dive deep into specific areas, this workshop is designed to foster meaningful conversations and practical takeaways.
Feb. 25-26, 2026 | ERO Women’s Leadership Conference
Back-to-back with our Internal Controls Workshop, be sure to stick around for the 2026 ERO Women’s Leadership Conference!
There will be an evening reception on Feb. 25 followed by the conference on Feb. 26.
RF is proud to serve as the host Regional Entity for this year’s event, which will be held in-person for the first time! Expect:
- Panels focused on professional development, mentorship, empowerment, and insights tailored to the energy sector
- Networking
- Professional head shot photo opportunity
- Additional resources
To explore our full calendar of upcoming events, click here.
First Things RFirst: November 2025