Mar 28, 2025|News

EPE’s Approach to NERC-CIP: Advancing Cybersecurity Beyond Compliance

By Hugo Perez

Cybersecurity is a critical priority for the electricity sub-sector as interconnected systems grow increasingly complex – and vulnerable. NERC’s Critical Infrastructure Protection (CIP) Standards provide a foundational framework to secure the Bulk Electric System (BES) and mitigate evolving cyber risks.

Across North America, registered entities invest significant resources to develop effective CIP programs.  While meeting compliance requirements is essential, leading programs go further – focusing on robust internal controls, comprehensive risk assessments, continuous vulnerability management. and implementation of regular reviews of security policies and procedures.  Together, these actions significantly reduce the likelihood of cyberattacks and grid disruptions.    

An external perspective has proven to help entities advance their CIP programs. EPE’s expert cybersecurity advisors are able to provide tailored support to develop or enhance your organization’s CIP program. From targeted assessments to a full mock audit, we will help you identify gaps, enhance controls, and prepare for audits – minimizing non-compliance risk and potential financial penalties. 

Our team brings direct experience working with NERC and the Regional Entities. To learn more about how we can help you achieve the strongest possible outcomes while bolstering your cybersecurity, contact us.

Related Intelligence

About the Author

Hugo Perez

Hugo F. Perez is a seasoned reliability professional with over 20 years of experience in regulatory matters, Bulk Electric System maintenance, planning, and operations. With deep expertise in the North American electric regulatory compliance landscape, Hugo has worked extensively with U.S., Canadian, and Mexican regulatory entities and registered organizations, playing a pivotal role in shaping and implementing policies that ensure power system reliability and security across North America.

Hugo provides leadership in developing and implementing program solutions, policies, and processes that support the safe and reliable operation of power systems. He has served as a key liaison between U.S. and non-U.S. stakeholders, including Canadian provincial and Mexican federal governments, as well as international energy organizations. Hugo has represented key energy initiatives at global energy forums, including IEEE PES meetings in Latin America and various CIGRE events worldwide.

Throughout his career, Hugo has demonstrated leadership at all levels, managing cross-functional teams and collaborating with international energy stakeholders to advance reliability standards and regulatory processes. His background includes a strong technical foundation in power system operations and planning, as well as extensive experience in compliance investigations and evaluations.

Hugo has worked closely with the Federal Energy Regulatory Commission (FERC) and other agencies to ensure compliance with reliability standards and address compliance issues across the electric reliability organization (ERO) enterprise. His ability to integrate technical expertise with strategic oversight has allowed him to drive successful projects that enhance the overall reliability of North America’s power grid.