GridSafe Technology publishes free security baseline checklist for Category 2 solar, wind and storage sites
A free 30-point checklist helps newly registered Category 2 owners apply NERC's Security Guideline for Inverter-Based Resources, site by site.
October 20, 2026 — GridSafe Technology today published a free Category 2 IBR security baseline checklist for owners and operators of solar, wind and battery storage facilities registered with NERC as Category 2 Generator Owners and Generator Operators.
Since May 15, 2026, inverter-based resources of 20 MVA or more in aggregate, connected at 60 kV or higher, have been registering with NERC under the revised Category 2 criteria. By April 20, 2026, NERC and the Regional Entities had identified 531 such facilities. Their new obligations are eight operating and planning standards; the CIP cyber security standards are not among them, because Category 2 resources are not Bulk Electric System facilities.
NERC's Security Guideline for Inverter-Based Resources recommends a practical cyber security baseline for these sites anyway, since they run the same inverters, plant controllers, SCADA and vendor remote access as larger plants. The checklist turns the guideline's baseline practices into 30 checks across five areas: assets and configuration, identity and access, remote access and vendors, network segmentation, and incident response and recovery.
From GridSafe
Registration told these owners they are on NERC's list. It did not tell them who can reach their sites or what changed there last month. The checklist is a plain starting point: work through it site by site, keep the records as you go, and the gaps show up quickly.
Availability
The checklist is free, needs no sign-up, and is available at gridsafetech.com/resources/category-2-ibr-security-baseline-checklist/.
About GridSafe Technology
GridSafe Technology builds on-premises OT security and NERC CIP evidence tools for power generation. GridShield collects evidence read-only from firewalls, controllers, relays, inverters and meters at each site, keeps every record hash-chained in an Evidence Vault, and fills RSAW worksheets for review. Learn more at gridsafetech.com.
Media contact
GridSafe Technology · info@gridsafetech.com
Is your site Category 2, or a BES site under CIP? Run the free registration check.