Commission Information Collection Activities (FERC-725B); Comment Request; Extension

Issuing agencies

Abstract

In compliance with the requirements of the Paperwork Reduction Act of 1995, 44 U.S.C. 3506(c)(2)(A), the Federal Energy Regulatory Commission (Commission or FERC) is soliciting public comment on the currently approved information collection, FERC-725B (1902-0248), Mandatory Reliability Standards, Critical Infrastructure Protection (CIP)--Update to CIP-015. This update changes the CIP-015-1 standard to CIP-015-2 which reflects the changes implemented through Order RD26-6- 000 issued on August 10, 2026.

Full Text

<html>
<head>
<title>Federal Register, Volume 91 Issue 196 (Tuesday, October 13, 2026)</title>
</head>
<body><pre>
[Federal Register Volume 91, Number 196 (Tuesday, October 13, 2026)]
[Notices]
[Pages 64921-64923]
From the Federal Register Online via the Government Publishing Office [<a href="http://www.gpo.gov">www.gpo.gov</a>]
[FR Doc No: 2026-20880]


-----------------------------------------------------------------------

DEPARTMENT OF ENERGY

Federal Energy Regulatory Commission

[Docket No. RD26-6-000]


Commission Information Collection Activities (FERC-725B); Comment 
Request; Extension

AGENCY: Federal Energy Regulatory Commission, DOE.

[[Page 64922]]


ACTION: Notice of information collection and request for comments.

-----------------------------------------------------------------------

SUMMARY: In compliance with the requirements of the Paperwork Reduction 
Act of 1995, 44 U.S.C. 3506(c)(2)(A), the Federal Energy Regulatory 
Commission (Commission or FERC) is soliciting public comment on the 
currently approved information collection, FERC-725B (1902-0248), 
Mandatory Reliability Standards, Critical Infrastructure Protection 
(CIP)--Update to CIP-015. This update changes the CIP-015-1 standard to 
CIP-015-2 which reflects the changes implemented through Order RD26-6-
000 issued on August 10, 2026.

DATES: Comments on the collections of information are due December 14, 
2026.

ADDRESSES: Please submit comments via email to <a href="/cdn-cgi/l/email-protection#2b6f4a5f4a68474e4a594a45484e6b6d6e7968054c445d"><span class="__cf_email__" data-cfemail="1d597c697c5e71787c6f7c737e785d5b584f5e337a726b">[email&#160;protected]</span></a>. 
You must specify Docket No. (RD26-6-000) in your email. If you are 
unable to file electronically, comments may be filed by USPS mail or by 
hand (including courier) delivery:
    <bullet> Mail via U.S. Postal Service only, addressed to: Federal 
Energy Regulatory Commission, Secretary of the Commission, 888 First 
Street NE, Washington, DC 20426.
    <bullet> Hand (including courier) delivery to: Federal Energy 
Regulatory Commission, 12225 Wilkins Avenue, Rockville, MD 20852.
    Docket: To view comments and issuances in this docket, please visit 
<a href="https://elibrary.ferc.gov/eLibrary/search">https://elibrary.ferc.gov/eLibrary/search</a>.

FOR FURTHER INFORMATION CONTACT: Kayla Williams may be reached by email 
at <a href="/cdn-cgi/l/email-protection#1c587d687d5f70797d6e7d727f795c5a594e5f327b736a"><span class="__cf_email__" data-cfemail="85c1e4f1e4c6e9e0e4f7e4ebe6e0c5c3c0d7c6abe2eaf3">[email&#160;protected]</span></a>, or by telephone at (202) 502-6468.

SUPPLEMENTARY INFORMATION: 
    Title: FERC-725B (Mandatory Reliability Standards, Critical 
Infrastructure Protection (CIP)).
    OMB Control No.: 1902-0248.
    Type of Request: Update to the currently approved information 
collection requirements within Reliability Standard CIP-015-2.
    Abstract: On June 18, 2026, the North American Electric Reliability 
Corporation (NERC), the Commission-certified Electric Reliability 
Organization (ERO), filed a petition with the Commission seeking 
approval of proposed Critical Infrastructure Protection (CIP) 
Reliability Standard CIP-015-2 (Cyber Security -- Internal Network 
Security Monitoring). NERC also requested approval of the associated 
implementation plan, violation risk factors, and violation severity 
levels, and the retirement of the currently effective Reliability 
Standard CIP-015-1. NERC states that proposed Reliability Standard CIP-
015-2 improves upon the currently approved Reliability Standard CIP-
015-1 by establishing requirements that extend internal network 
security monitoring (INSM) to include electronic access control or 
monitoring systems (EACMS) and physical access control systems (PACS) 
outside of the electronic security perimeter. NERC explains the 
proposed revisions prevent a potential gap in the coverage of the 
standard that could allow an attacker to use compromised EACMS and PACS 
outside the electronic security perimeter to access the operational 
technology environment inside the electronic security perimeter. NERC 
contends that proposed Reliability Standard CIP-015-2 addresses the 
Commission's directive in Order No. 907, and as clarified in Order No. 
907-A, to extend INSM beyond the electronic security perimeter to all 
systems in an entity's CIP-networked environment.\1\
---------------------------------------------------------------------------

    \1\ Critical Infrastructure Protection Reliability Standard CIP-
015-1--Cyber Security--Internal Network Security Monitoring, Order 
No. 907, 191 FERC ] 61,224, order on clarification, Order No. 907-A, 
192 FERC ] 61,171 (2025).
---------------------------------------------------------------------------

    NERC's filing was published in the Federal Register, 91 FR 38413 
(June 25, 2026), with interventions and protests due on or before July 
20, 2026. Timely motions to intervene were filed by Ameren Illinois 
Company, Ameren Transmission Company of Illinois, and Union Electric 
Company. Pursuant to Rule 214 of the Commission's Rules of Practice and 
Procedure, 18 CFR 385.214 (2025), the timely, unopposed motions to 
intervene serve to make the entities that filed them parties to this 
proceeding.
    Type of Respondents: Distribution Provider, Generator Operator, 
Generator Owner, Reliability Coordinator, Transmission Operator, and 
Transmission Owner.
    Estimate of Annual Burden: \2\ The Commission estimates the annual 
public reporting burden for the information collection as:
---------------------------------------------------------------------------

    \2\ The Commission defines burden as the total time, effort, or 
financial resources expended by persons to generate, maintain, 
retain, or disclose or provide information to or for a federal 
agency. For further explanation of what is included in the 
information collection burden, reference 5 Code of Federal 
Regulations 1320.3.
    \3\ The NERC Compliance Registry, as of August 2026, identifies 
approximately 1,706 unique U.S. entities that are subject to 
mandatory compliance with CIP Reliability Standards. Of this total, 
we estimate that 360 entities will face an increased paperwork 
burden under Reliability Standard CIP-015-2.
    \4\ The estimates for cost per hour are $135.51/hour (averaged 
based on the following occupations):
    <bullet> Legal Occupations (90th percentile) (Occupation Code: 
23-0000): $256.49/hour
    <bullet> Electrical Engineer (mean) (Occupation Code: 17-2071): 
$92.32/hour
    <bullet> Office and Administrative Support (90th percentile) 
(Occupation Code: 43-0000): $57.73/hour
    The estimated hourly cost (salary plus benefits) is a 
combination of the following categories from the Bureau of Labor 
Statistics (BLS) website, June 12, 2026, links to reference, 
Occupational Employment and Wage Statistics and <a href="http://www.bls.gov/oes/current/naics2_22.htm">http://www.bls.gov/oes/current/naics2_22.htm</a>.

           FERC-725B--(Mandatory Reliability Standards for Critical Infrastructure Protection [CIP] Reliability Standards) Update to CIP-015-2
--------------------------------------------------------------------------------------------------------------------------------------------------------
                                 Number and     Annual number                         Average burden per                                       Average
                                   type of       of responses    Total number of    response (hours) \4\ &    Total annual burden (hours) &    cost per
                               respondent \3\   per respondent      responses          cost per response        total annual cost \5\ ($)     respondent
                                          (1)              (2)    (1) * (2) = (3)  (4).....................  (3) * (4) = (5)...............    (5) / (1)
--------------------------------------------------------------------------------------------------------------------------------------------------------
CIP-015-2....................             360                6              2,160  14 hrs.; $1,897.14......  30,240 hrs.; $4,097,822.40....   $11,382.84
                              --------------------------------------------------------------------------------------------------------------------------
    Total Burden of CIP-015-2  ..............  ...............              2,160  ........................  30,240 hrs.; $4,097,822.40....  ...........
--------------------------------------------------------------------------------------------------------------------------------------------------------

    Comments: Comments are invited on: (1) whether the collection of 
information is necessary for the proper performance of the functions of 
the Commission, including whether the information will have practical 
utility; (2) the accuracy of the agency's estimate of the burden and 
cost of the collection of information, including the validity of the 
methodology and assumptions used; (3) ways to enhance the quality, 
utility and clarity of the information collection; and (4) ways to 
minimize the burden of the collection of information on those who are 
to respond, including the use

[[Page 64923]]

of automated collection techniques or other forms of information 
technology.

    Dated: October 7, 2026.
Debbie-Anne A. Reese,
Secretary.
[FR Doc. 2026-20880 Filed 10-9-26; 8:45 am]
BILLING CODE 6717-01-P


</pre><script data-cfasync="false" src="/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script></body>
</html>