Order No. 918; Critical Infrastructure Protection Reliability Standard CIP-003-11-Cyber Security-Security Management Controls

What it does

The Federal Energy Regulatory Commission (Commission) approves the proposed Critical Infrastructure Protection (CIP) Reliability Standard CIP-003-11 (Cyber Security--Security Management Controls). The North American Electric Reliability Corporation (NERC), the Commission- certified Electric Reliability Organization (ERO), submitted the proposed Reliability Standard to mitigate risks posed by a coordinated cyberattack on low-impact facilities, the aggregate impact of which could be much greater.

The Federal Energy Regulatory Commission's summary, as published in the Federal Register.

What changed in the regulation

1 part of Title 18 of the Code of Federal Regulations:

18 CFR 40

Wording on eCFR: the day before it took effect and from the day it took effect (first part listed).

Compared with

The Federal Energy Regulatory Commission has published 10 final rules in 2026 so far, compared with 14 in all of 2025.

Counted by the Tribune from Federal Register records since Jan. 1, 2025.

What happens next and when

This action is effective May 26, 2026.

The agency's dates, word for word.

Check it yourself

• The document in the Federal Register
• Title 18 on eCFR

The record as published

Source: the Federal Register (public domain). The document in the Federal Register