Insights
Security and compliance, in practice
What the rules require, where they fall short, and what to do about it.
Not Air-Gap Tight, part 1
Before you plug into the grid: what NERC CIP expects from contractor laptops
NERC CIP contractor laptop requirements explained: what the utility reviews before your laptop connects, which standard applies, and the evidence to have ready.
Not Air-Gap Tight, part 2
The NERC CIP loophole between the loading dock and go-live
A NERC CIP loophole leaves new grid equipment uncovered from the loading dock to go-live. See how malware could ride in and what to do about it now.
Article
No signal isn't a security plan: patching field laptops that can't stay connected
Patching field laptops that go months offline: what CIS, NIST and ISO expect, why offline is no exception, and a schedule that works in the field.