ENERGY

Grid operators, transmission system operators, distribution utilities, and the upstream midstream operators that feed them. TSA Pipeline Security Directives and NERC CIP cyber-security standards apply in the US, with NIST CSF as the cross-program mapping language. Attention is triggered by a firmware gap on remote-access VPN or jump host, by an intrusion disclosed by CISA or a sector ISAC, or by a near-miss at a peer operator triggering a precautionary review.

/energy