{"version":"0.12.1","built_at":"2026-10-12T10:56:26.035Z","license":"CC BY 4.0 © Mike Reams","canonical":"https://catalog.mikereams.com","capability":{"id":"BC-1580.40","name":"Critical Infrastructure Protection Compliance","level":2,"parent_id":"BC-1580","l1_id":"BC-1580","industry":"utilities","macro_id":null,"path":["Utility Regulation & Resilience","Critical Infrastructure Protection Compliance"],"description":"Meet the mandatory protection standards that apply to bulk power, gas and water systems, by classifying covered assets, applying required controls and keeping audit-ready evidence.","aliases":["CIP Compliance","Critical Infrastructure Compliance","Grid Security Standards"],"in_scope":["Identifying and categorizing covered systems and sites","Mapping required controls to evidence","Audits, self-reports and mitigation plans"],"out_of_scope":["The cybersecurity program and security operations (see BC-760)","Physical security guarding and monitoring (see BC-840)"],"csdm_note":null,"status":"active","successor_id":null,"child_ids":["BC-1580.40.10","BC-1580.40.20","BC-1580.40.30"]},"crosswalk":{"realized_by":[],"used_in":[],"patterns":[],"stacks":[],"books":[],"technology":[{"id":"TR-130.30","name":"OT & ICS Security","domain_id":"TR-130","via":null}]},"ancestors":[{"id":"BC-1580","name":"Utility Regulation & Resilience","level":1}],"children":[{"id":"BC-1580.40.10","name":"Covered Asset Categorization","level":3,"child_count":0},{"id":"BC-1580.40.20","name":"Protection Control Evidence","level":3,"child_count":0},{"id":"BC-1580.40.30","name":"Protection Audit & Self-Report","level":3,"child_count":0}]}