Energy
Control room operator facing a wall of monitors

Who it's forCompliance

Compliance and security teams

CIP, vendors and incidents, with every finding cited.

NERC CIP requirements mapped to each asset. Vendors assessed against CIP-013. Incidents mapped to reporting deadlines and who to notify. Crosswalks and board reports, every finding cited to its source.

Start with Essentials Book a demo

What changes for you

The rules that change for compliance teams.

Security and reliability rules carry deadlines measured in hours and audits measured in evidence. These are the ones you answer for.

01

NERC CIP-002 to CIP-015

Critical Infrastructure Protection from BES Cyber System categorization through internal network security monitoring, as versions are revised.

02

CIP-013 supply chain

Supply chain risk management: how vendors are assessed, what the plan must cover and what auditors look for.

03

CIP-008 incident reporting

Reportable cyber security incidents go to the E-ISAC and CISA within 1 hour of determination. Attempts are due by the end of the next calendar day.

04

EOP-004 and DOE OE-417

Event reporting under EOP-004, and the OE-417 emergency alert within 1 hour, normal report within 6 hours and final report within 72 hours.

05

State and ISO rules

Texas commission reporting rules, ERCOT protocol notices and each ISO's own reporting procedures.

06

Frameworks beyond NERC

Compare NERC standards with FERC regulations (18 CFR), PUCT rules or an ISO rulebook to find gaps and overlaps.

What you get

What PhronEdge gives compliance teams.

Watch it work

CIP mapped to each asset

Register each asset and see the CIP requirements that apply to it, each one cited to the standard.

Vendor risk against CIP-013

Assess any vendor against CIP-013 and related CIP standards. Get a risk score, the gaps and remediation actions, exportable as PDF.

Incident response mapping

Report an incident and get every reporting obligation that applies, the deadline on each clock, who to notify and what to file.

Cross-framework crosswalk

Compare obligations across 2 frameworks, side by side, with gaps, overlaps and recommended actions. Export as PDF or CSV.

Reports for the board

Entity, incident, crosswalk and vendor reports formatted for board review, with your logo. Every finding cited.

An audit log

Activity history for the workspace, so you can show who did what and when.

In the product

Ask about any requirement and check the source.

Relay answers compliance questions in plain language, with numbered citations to NERC standards, ISO manuals and protocol sections. Every link opens the document it came from.

How it works

How compliance teams use PhronEdge, in 3 steps.

1

Register your assets

PhronEdge maps the CIP requirements and the reliability standards that apply to each one.

2

Assess and map

Run vendor assessments, map incidents to reporting duties and build crosswalks.

3

Report and prove it

Export cited reports for the board and keep the history in the audit log.

City lights across a continent seen from orbit at night

Sources that cover you

The sources we watch for compliance teams.

NERC CIP-002 to CIP-015CIP-013CIP-008EOP-004DOE OE-417E-ISACState commissions
See every source we cover

Questions

What compliance teams ask us.

Something else on your mind? Book a call with us.

CIP-002 through CIP-015, along with NERC's operations and planning standards.

Add the vendor and PhronEdge assesses it against CIP-013 and the related CIP standards. You get a risk score, the gaps with their citations and remediation actions, exportable as PDF.

Federal, Texas and operator reporting rules are fixed in the product, each checked against its primary source, and the deadlines are computed in the incident's local time zone.

Yes. The crosswalk compares NERC standards with FERC regulations (18 CFR), PUCT Chapter 25 rules, an ISO rulebook or a state commission rule set, and lists the gaps and overlaps requirement by requirement.

Also built for

PhronEdge for other teams.

Trading desk monitors showing power price curves, with transmission towers on the hills outside

Traders and power marketers

Solar farm on open grassland under a wide sky

Developers and IPPs

Battery storage containers beside a substation at dawn

Operators of registered assets

Data center campus with its own substation at dusk

Large loads and data centers

Something was published this week that applies to you.

Find out what it was.