CIP-003-11 Cyber Security Reliability Standard Security Management Controls
Summary
FERC issued Order 918, a final rule adopting Critical Infrastructure Protection Reliability Standard CIP-003-11 (Cyber Security – Security Management Controls) under docket RM25-8. The order establishes updated security management control requirements for responsible entities operating the bulk electric system. Citation: 194FERC61,210.
What changed
FERC Order 918 finalizes revisions to CIP-003-11, the Critical Infrastructure Protection reliability standard addressing cyber security management controls for the bulk electric system. The order, issued under RM25-8 and citing 194FERC61,210, modifies security management control requirements applicable to responsible entities as defined under the NERC reliability framework.\n\nRegistered entities subject to CIP reliability standards must implement the updated security management controls in accordance with the implementation timeline established under the standard development process. Non-compliance with FERC-approved reliability standards may result in enforcement action through NERC's compliance monitoring and enforcement program. Entities should review Order 918 and assess gaps between current security management controls and the revised standard requirements.
What to do next
- Review Order 918 and assess current CIP-003-11 implementation against updated requirements
- Update security management control policies and procedures to align with revised standard provisions
- Monitor NERC compliance deadlines for CIP-003-11 implementation
Source document (simplified)
Document Info for Accession Number: 20260319-3042
Details Document: 03/19/2026
Filed: 03/19/2026
Posted: 03/19/2026 11:59:08 AM
First Received Date: 03/19/2026 11:33:32 AM
Security Level: Public
Official: Yes
E-filing: No
Non-decisional: No
Category: Issuance
Library: Electric,Rulemaking
Aperture: 0
File Type:
Description* :** Order No. 918: Final Rule; Critical Infrastructure Protection Reliability Standard CIP-003-11 – Cyber Security – Security Management Controls under RM25-8.
File List
| Docket | Sub-Docket | Type |
| --- | --- | --- |
| RM25-8 | 000 | On Document |
| Document Class | Document Type |
| --- | --- |
| Order/Opinion | Commission Order/Opinion |
| Correspondent | Last Name | First Name | MI | Role/Org |
| --- | --- | --- | --- | --- |
| AUTHOR | CLAY | C | D | SECRETARY OF THE COMMISSION, FERC |
| AUTHOR | * | * | | COMMISSIONERS AND IMMEDIATE STAFF (THE COMMISSION) |
| Associate Type | Associate Numbers |
| --- | --- |
| Ferc Cite Number | 194FERC61,210 |
| Order Number | 918 |
Named provisions
Related changes
Get daily alerts for FERC eLibrary: Rulemakings - ChangeBridge
Daily digest delivered to your inbox.
Free. Unsubscribe anytime.
Source
Classification
Who this affects
Taxonomy
Browse Categories
Get alerts for this source
We'll email you when FERC eLibrary: Rulemakings - ChangeBridge publishes new changes.