Solutions · Compliance by region

One platform. Your rules.

Grid operators everywhere are asked the same questions: what do you have, is it protected, did anything change, and can you prove it? Choose your region to see what applies to you, what to do, when — and exactly how GridSafe covers it, including what it does not do yet.

Choose your regionTalk to an Engineer
Same tool, every region

The evidence is universal. The lens is local.

You do not need a different product per country — you need the same facts, read through the rule you answer to.

  1. 1

    Collect once

    GridShield gathers the same evidence at every site: assets, configurations and changes, access, alerts — read-only, on-premises.

  2. 2

    Prove it

    Every collection is hash-chained, so the record can be shown to be unaltered — to any auditor, in any country.

  3. 3

    Read it through your rules

    NERC CIP is built in. Elsewhere, the same evidence lines up with your regime's asset, access, change and monitoring controls.

Choose your region

What applies, what to do, when — and what we do for you

Built for it = native reports. Evidence ready = GridSafe collects what that control needs. Via crosswalk = reference mapping to IEC 62443 / NIST CSF. Not yet = honest gaps.

United States & Canada

NERC CIP-002 to CIP-015

NERC and its Regional Entities (FERC-approved); in Canada, adopted province by province

  • 6 · Built for it
What applies

The Bulk Electric System — generation, transmission and control centers — categorized as high, medium or low impact.

What to do
  • Categorise BES Cyber Systems (CIP-002).
  • Low impact: the CIP-003 plan obligations at every site.
  • Medium and high: CIP-004 to CIP-011, CIP-013 and, inside the perimeter, CIP-015 monitoring.
When
  • CIP-003-9 vendor remote access at low impact: from April 1, 2026.
  • CIP-015-1 at Control Centers and backup Control Centers: from October 1, 2028.
  • CIP-015-1 for other medium-impact systems with External Routable Connectivity: by October 1, 2030.

What GridSafe does for you here

  • Built for itReportingRSAW worksheets, CIP scoring and audit packages for all 14 FERC-approved CIP standards.
  • Built for itAssets & categorizationContinuous asset inventory of every device, collected read-only — Windows with the Agent; firewalls, switches, PLCs, RTACs, meters and inverters without one.
  • Built for itChange controlConfiguration baselines with change detection on every collection, so an unexpected change is seen and recorded.
  • Built for itAccessAccount and access evidence from each device, for periodic access reviews.
  • Built for itIncidents & monitoringMonitoring and alerts; high and critical alerts open incidents in CIPStart.
  • Built for itLow-impact programCIPStart runs the CIP-003 plans, BES applicability wizard and supply-chain program end to end.
Talk to us about United States & CanadaRead the full guide

General information, not legal advice. Dates were checked on October 8, 2026 against the regulators' published texts; always confirm with your regulator.

Operating in more than one country?

One Command Center, every site — tell us where you operate and we will map it with you.

Talk to an EngineerRead the guide