NERC CIP was written for humans. AI agents are here. This is the mapping.

NERC CIP standards govern how utilities protect the bulk electric system. They cover access control, change management, incident response, supply chain risk, and information protection. Every requirement assumes the operator is a person.

That assumption is breaking. AI agents are now forecasting generation output, optimizing battery dispatch, bidding into wholesale markets, monitoring substation equipment, and analyzing compliance obligations. These agents access the same BES Cyber Systems that CIP was designed to protect. But the standards say nothing about them.

The gap

A compliance officer at a utility deploying AI faces a question with no official answer: does CIP-004 personnel training apply to an AI agent? Does CIP-010 configuration change management apply to model retraining? Does CIP-013 supply chain risk management apply to the company providing the AI model?

NERC has not issued guidance. FERC has not issued guidance. The standards are technology-neutral by design, which means they apply to AI systems by interpretation. But nobody has published the interpretation.

The mapping

We built it. Nine CIP standards mapped to their AI agent equivalents. For each standard: what the original requirement says, what it means when an AI agent is involved, a real operational scenario, and the technical controls required for enforcement.

CIP-002 asset categorization becomes agent inventory and impact classification. CIP-004 personnel training becomes agent identity management and permission scoping. CIP-005 electronic security perimeters becomes API-level enforcement on every call the agent makes. CIP-007 patch management becomes model version tracking and integrity verification. CIP-008 incident response becomes full decision chain auditability. CIP-010 configuration management becomes model retraining change control. CIP-011 information protection becomes output filtering for CEII and BCSI. CIP-013 supply chain risk becomes model provider vendor assessment.

Why now

Three forces are converging. FERC is examining algorithmic participation in wholesale markets. The EU AI Act classifies energy grid management as high-risk AI. And every utility, ISO, and independent power producer in North America is either deploying AI today or planning to within 24 months.

The question is not whether these systems need governance. The question is whether governance frameworks will exist before the first enforcement action forces them into existence.

Get the full framework

The complete mapping covers all nine standards with detailed scenarios and enforcement mechanisms. It is designed for compliance officers, CISOs, and regulatory affairs teams at registered entities deploying or evaluating AI systems that interact with BES Cyber Systems.