From Dev.to
Low impact or medium impact? Where NERC CIP impact ratings go wrong
The impact rating decides almost everything else in a NERC CIP program: which requirements apply, how much evidence you keep and what an audit looks at. CIP-002-5.1a's bright-line criteria are short,...