@ampyxcyber@infosec.exchange

AMPYX CYBER @ampyxcyber@infosec.exchange · Aug 05, 2026

FERC just created a new grid registration category: Computational Load Entity. Large AI data centers and crypto loads can now fall under mandatory federal reliability standards for the first time. Our plain-English guide to what it is and why it exists - https://ampyxcyber.com/blog/what-is-a-computational-load-entity

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Jul 29, 2026

August 3 is not the finish line. It is the first entry in the record of how ready you were when the AI reliability boundary arrived. What to file, and which gaps to start closing: https://ampyxcyber.com/blog/computational-load-level-3-alert-august-3

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Jul 28, 2026

FERC turned NERC's voluntary computational load timeline into federal deadlines. Data centers become registered entities by Dec 31, and whether CIP applies is still unwritten. What's settled and what's not: https://ampyxcyber.com/blog/ferc-computational-load-order-rd26-7-000

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Jul 27, 2026

Ask a utility if they'd run their EMS in the cloud and they cringe. Fair. But their email, HR, and security tools already live there. NERC's answer is the new "100-Series," a parallel cloud CIP you elect into per system. Comment closes Aug 21. https://ampyxcyber.com/blog/nerc-cip-100-series-cloud

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Jul 23, 2026

In NERC CIP, the checklist still matters, but internal controls are what auditors now scrutinize. New post: control types, testing, evidence, WECC's ICDCT, and the December 2025 ERO Guide. https://ampyxcyber.com/blog/internal-controls-in-nerc-cip-compliance-programs

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Jul 21, 2026

FERC turned NERC's voluntary computational load timeline into federal deadlines. Data centers become registered entities by Dec 31, and whether CIP applies is still unwritten. What's settled and what's not: https://ampyxcyber.com/blog/ferc-computational-load-order-rd26-7-000

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Jul 16, 2026

In NERC CIP, the checklist still matters, but internal controls are what auditors now scrutinize. New post: control types, testing, evidence, WECC's ICDCT, and the December 2025 ERO Guide. https://ampyxcyber.com/blog/internal-controls-in-nerc-cip-compliance-programs

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Jul 15, 2026

Food cybersecurity is not food security. Ransomware to nation-state to agroterrorism, Kristin King explains the difference, and why food and agriculture is one of the least defended corners of critical infrastructure. New Critical Assets episode: https://ampyxcyber.com/podcast/the-attack-surface-you-eat-cyber-risk-in-food-and-agriculture

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Jul 10, 2026

DHS reopened the private forum where critical infrastructure operators and agencies compare cyber threats. The legal shield that made those talks safe did not come back with it. What ANCHOR-CI changes: https://ampyxcyber.com/blog/anchor-ci-cisa-councils-liability-gap

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Jul 08, 2026

Food cybersecurity is not food security. Ransomware to nation-state to agroterrorism, Kristin King explains the difference, and why food and agriculture is one of the least defended corners of critical infrastructure. New Critical Assets episode: https://ampyxcyber.com/podcast/the-attack-surface-you-eat-cyber-risk-in-food-and-agriculture

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Jul 06, 2026

NERC CIP Bootcamp: Dallas, Aug 11-14. 3.5 days, in-person. CIP-002 through CIP-015, CMEP v8, Internal Controls Monitoring. Virtualization & Low Impact. Taught by one of the original architects of NERC CIP and the first CIP auditor in North America. https://ampyxcyber.com/nerc-cip-bootcamp

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Apr 16, 2026

Stop chasing checklists.

Our 3.5-day NERC CIP Bootcamp moves past the theory into the technical reality of the grid. From CIP-002 to the new CIP-015, Low Impact to Virtualization, learn to stay ahead of your adversaries and your auditors.

Register here: https://ampyxcyber.com/training

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Apr 14, 2026

Claude Mythos and the OT Threat Horizon: What Utility Operators Need to Know Now https://ampyxcyber.com/blog/claude-mythos-and-the-ot-threat-horizon-what-utility-operators-need-to-know-now

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Apr 09, 2026

Stop chasing checklists.

Our 3.5-day NERC CIP Bootcamp moves past the theory into the technical reality of the grid. From CIP-002 to the new CIP-015, Low Impact to Virtualization, learn to stay ahead of your adversaries and your auditors.

Register here: https://ampyxcyber.com/training

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Mar 24, 2026

The E-ISAC is doing serious work inside a structure that limits how far that work can go. Both things are true. Our analysis of the 2025 End-of-Year Report: https://ampyxcyber.com/blog/the-e-isacs-2025-report-real-progress-remaining-constraints

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Mar 23, 2026

NERC Industry Survey: Physical Supply Chain Risk Management
https://www.surveymonkey.com/r/SCS-PhysicalRiskReport

Supply Chain Subcommittee (SCS) is seeking industry feedback on physical supply risks to inform the physical supply risk report.

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Mar 19, 2026

FERC approved Orders 918 & 919 today. CIP virtualization standards, new low-impact controls, and an updated Control Center definition. All registered entities affected. 24 and 36 month implementation windows. Start your assessments now.

Full breakdown: https://ampyxcyber.com/blog/ferc-issues-orders-on-virtualization-and-low-impact-what-changed-and-what-you-need-to-do

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Mar 17, 2026

The E-ISAC is doing serious work inside a structure that limits how far that work can go. Both things are true. Our analysis of the 2025 End-of-Year Report: https://ampyxcyber.com/blog/the-e-isacs-2025-report-real-progress-remaining-constraints

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Mar 16, 2026

The new National Cyber Strategy calls compliance checklists a problem. We've been saying that for years. But deregulation and security aren't the same thing either. What replaces a requirement matters more than removing it. Full analysis at https://ampyxcyber.com/blog/redesigning-the-machine-nerc-board-accepts-transformational-standards-modernization-plan-p2b7w

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Mar 09, 2026

The new National Cyber Strategy calls compliance checklists a problem. We've been saying that for years. But deregulation and security aren't the same thing either. What replaces a requirement matters more than removing it. Full analysis at https://ampyxcyber.com/blog/redesigning-the-machine-nerc-board-accepts-transformational-standards-modernization-plan-p2b7w

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Feb 17, 2026

Coordinated destructive cyberattacks across 30+ renewable farms, a CHP plant, and manufacturing in Poland. Not ransomware. Sabotage. Custom wiper malware designed to damage RTUs, PLCs, relays, and serial device servers. https://ampyxcyber.com/blog/polands-energy-sector-attack-when-cyber-sabotage-targets-ot

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Feb 10, 2026

Coordinated destructive cyberattacks across 30+ renewable farms, a CHP plant, and manufacturing in Poland. Not ransomware. Sabotage. Custom wiper malware designed to damage RTUs, PLCs, relays, and serial device servers. https://ampyxcyber.com/blog/polands-energy-sector-attack-when-cyber-sabotage-targets-ot

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Feb 09, 2026

Just dropped: Our first Policy Pulse - Regulatory Roundtable panel podcast episode With JoyDitto & Earl Shockley.

We tackle:
- NERC low-impact crackdown
- Audit competency & CMEP reform
- AI in OT & the looming cyber strategy
- Talent gaps in the sector

https://ampyxcyber.com/podcast/policy-pulse-regulatory-roundtable-nerc-cip-cybersecurity-strategy-ai-electric-sector

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Feb 06, 2026

Coordinated destructive cyberattacks across 30+ renewable farms, a CHP plant, and manufacturing in Poland. Not ransomware. Sabotage. CERT Polska just published the most detailed OT attack post-mortem we've seen. https://ampyxcyber.com/blog/polands-energy-sector-attack-when-cyber-sabotage-targets-ot

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Feb 03, 2026

Secure connectivity guidance often assumes greenfield architectures. Most OT environments are brownfield reality. Real resilience is not just network controls. It is people, manual capability, physical engineering, training, and sustained investment. https://ampyxcyber.com/blog/humans-engineering-shifts-required-investment-and-commitment-for-operational-security

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Feb 02, 2026

Just dropped: Our first Policy Pulse - Regulatory Roundtable panel podcast episode With JoyDitto & Earl Shockley.

We tackle:
- NERC low-impact crackdown
- Audit competency & CMEP reform
- AI in OT & the looming cyber strategy
- Talent gaps in the sector

https://ampyxcyber.com/podcast/policy-pulse-regulatory-roundtable-nerc-cip-cybersecurity-strategy-ai-electric-sector

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Feb 01, 2026

NERC’s CMEP Version 8 does not change the Reliability Standards. It stabilizes how compliance monitoring and enforcement operate across the ERO Enterprise. What this means for audits, risk-based scope, technical competence, & ERO-wide consistency at https://ampyxcyber.com/blog/how-cmep-version-8-reshapes-nercs-compliance-model

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Jan 27, 2026

Secure connectivity guidance often assumes greenfield architectures. Most OT environments are brownfield reality. Real resilience is not just network controls. It is people, manual capability, physical engineering, training, and sustained investment. https://ampyxcyber.com/blog/humans-engineering-shifts-required-investment-and-commitment-for-operational-security

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Jan 26, 2026

NERC’s December 2025 Internal Controls Guide quietly reshapes CMEP. ICE is gone. Continuous, risk based control oversight now drives COPs, audit depth, and regulatory trust. Internal controls are no longer periodic. They are always on. Full analysis: https://ampyxcyber.com/blog/from-spot-evaluations-to-continuous-oversight-nercs-new-internal-controls-model

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Jan 25, 2026

NERC’s CMEP Version 8 does not change the Reliability Standards. It stabilizes how compliance monitoring and enforcement operate across the ERO Enterprise. What this means for audits, risk-based scope, technical competence, & ERO-wide consistency at https://ampyxcyber.com/blog/how-cmep-version-8-reshapes-nercs-compliance-model

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Jan 22, 2026

A new joint US/UK/EU agency coalition just released a new OT secure connectivity doctrine. We break down what it really means for utilities and industrial operators, what breaks in legacy environments, and the safety/engineering realities behind it https://ampyxcyber.com/blog/new-joint-agency-guidance-secure-connectivity-principles-for-ot

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Jan 21, 2026

NERC’s new CIP Roadmap marks a major shift in how cyber risk will be regulated across the power grid. MFA for low impact systems, protection of telecom dependent control traffic, cloud security, and new focus on IBRs, DERs, EVSE, and large loads.

https://ampyxcyber.com/blog/nercs-cip-roadmap-and-the-future-of-grid-cybersecurity

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Jan 19, 2026

NERC’s December 2025 Internal Controls Guide quietly reshapes CMEP. ICE is gone. Continuous, risk based control oversight now drives COPs, audit depth, and regulatory trust. Internal controls are no longer periodic. They are always on. Full analysis: https://ampyxcyber.com/blog/from-spot-evaluations-to-continuous-oversight-nercs-new-internal-controls-model

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Jan 16, 2026

A new joint US/UK/EU agency coalition just released a new OT secure connectivity doctrine. We break down what it really means for utilities and industrial operators, what breaks in legacy environments, and the safety/engineering realities behind it https://ampyxcyber.com/blog/new-joint-agency-guidance-secure-connectivity-principles-for-ot

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Jan 14, 2026

NERC’s new CIP Roadmap marks a major shift in how cyber risk will be regulated across the power grid. MFA for low impact systems, protection of telecom dependent control traffic, cloud security, and new focus on IBRs, DERs, EVSE, and large loads. https://ampyxcyber.com/blog/nercs-cip-roadmap-and-the-future-of-grid-cybersecurity

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Jan 13, 2026

Now hiring: Business Development Administrator (remote, contract 1099). Track RFx, support proposals, keep the pipeline organized, and coordinate docs and timelines. Join a mission-driven team protecting critical infrastructure. Apply: https://www.linkedin.com/jobs/view/4358329695

0

AMPYX CYBER @ampyxcyber@infosec.exchange · Jan 11, 2026

Now hiring: Business Development Administrator (remote, contract 1099). Track RFx, support proposals, keep the pipeline organized, and coordinate docs and timelines. Join a mission-driven team protecting critical infrastructure. Apply: https://www.linkedin.com/jobs/view/4358329695

0

AMPYX CYBER

Posts

Remote instance

Media