--- title: "On-Demand: NERC CIP-015: Monitoring Deep Inside Critical Networks | Dragos" description: Tim Conway of SANS and Robert M. Lee of Dragos break down how to approach INSM—from initial planning to real-world implementation. Watch now → image: https://hub.dragos.com/hubfs/SANS_NERC_CIP_015_WEBINAR_ON-DEMAND_GRAPHIC.png --- [![lineup](https://hub.dragos.com/hs-fs/hubfs/raw_assets/public/Dragos_June2021/images/Logo-2.png?width=1996&height=115&name=Logo-2.png "lineup")](https://www.dragos.com/?hsLang=en) - [Dragos Platform](https://www.dragos.com/cybersecurity-platform/) - [Services](https://www.dragos.com/services) - [Resources](https://www.dragos.com/resources) - [Company](https://www.dragos.com/about) - [Dragos Platform](https://www.dragos.com/cybersecurity-platform/) - [Services](https://www.dragos.com/services) - [Resources](https://www.dragos.com/resources) - [Company](https://www.dragos.com/about) - [Blog](https://hub.dragos.com/blog) [Request a Demo](https://www.dragos.com/request-a-demo?hsLang=en) ##### ON-DEMAND WEBINAR # NERC CIP-015: Monitoring Deep Inside Critical Networks to Keep Adversaries Outside ![](https://play.vidyard.com/Lm9qAqpAcw7syTzeDT3AfF.jpg) *Original Air Date: 8/19/25* [DOWNLOAD THE PRESENTATION](https://hub.dragos.com/hubfs/SANS%20Dragos%20NERC%20CIP-015%20Aug%20192025.pdf?hsLang=en) ### Meet the Speakers --- ![Tim\_Headshot](https://hub.dragos.com/hs-fs/hubfs/SANS/Tim_Headshot.png?width=260&height=260&name=Tim_Headshot.png) ##### Tim Conway ###### ICS Curriculum Lead ![SANS\_Institute\_Logo.svg](https://hub.dragos.com/hs-fs/hubfs/SANS_Institute_Logo.svg.png?width=100&height=50&name=SANS_Institute_Logo.svg.png) ![Robert M. Lee - Dragos 2024 - Teal Circle (1)](https://hub.dragos.com/hs-fs/hubfs/Robert%20M.%20Lee%20-%20Dragos%202024%20-%20Teal%20Circle%20(1).png?width=200&height=200&name=Robert%20M.%20Lee%20-%20Dragos%202024%20-%20Teal%20Circle%20(1).png) ##### Robert M. Lee ###### Co-Founder & CEO ![Dragos\_Logo\_RGB](https://hub.dragos.com/hs-fs/hubfs/Dragos_Logo_RGB.png?width=220&height=50&name=Dragos_Logo_RGB.png) **NERC CIP-015-1 has been approved**, introducing new requirements for **Internal Network Security Monitoring (INSM)** across all High Impact Bulk Electric Systems (BES) Cyber Systems with and without External Routable Connectivity (ERC) and Medium Impact BES Cyber Systems with ERC.   During this webinar, **Tim Conway, SANS ICS Curriculum Lead**, and **Robert M. Lee, Co-Founder and CEO of Dragos** and SANS ICS/OT Practice Lead, discuss how to approach INSM—from initial planning to real-world implementation.     Designed for **asset owners in the North American electric sector**, this session covers:  - A detailed breakdown of the three key aspects of CIP-015: collecting, detecting, and evaluating internal network activity - What effective INSM really looks like in practice - Actionable guidance to help compliance and security teams prepare for CIP-015 [![Dragos\_SANS\_BuyersGuide\_NERC\_Socials\_March25\_Final\_LinkedIn\_1200x628\_Final](https://hub.dragos.com/hubfs/Dragos_SANS_BuyersGuide_NERC_Socials_March25_Final_LinkedIn_1200x628_Final.png "Dragos_SANS_BuyersGuide_NERC_Socials_March25_Final_LinkedIn_1200x628_Final")](https://hub.dragos.com/guide-nerc-cip-015?hsLang=en) **SANS BUYER'S GUIDE** ##### NERC CIP-015: Strengthening Cybersecurity from Within Authored by industry expert Tim Conway of the SANS Institute, this guide details the NERC CIP-015-1 standard and offers actionable guidance to help your organization prepare for this upcoming regulation. [Download Now](https://hub.dragos.com/guide-nerc-cip-015?hsLang=en) [![Dragos\_CS\_DominionEnergy\_Socials\_June25\_Final\_LinkedIn\_1200x628\_Final](https://hub.dragos.com/hubfs/Dragos_CS_DominionEnergy_Socials_June25_Final_LinkedIn_1200x628_Final.png "Dragos_CS_DominionEnergy_Socials_June25_Final_LinkedIn_1200x628_Final")](https://hub.dragos.com/thank-you/case-study/dominion-energy-strategic-investment-in-ot-security?hsLang=en) **CASE STUDY** ##### Dominion Energy Success Story Discover how one of America’s largest utilities deployed Dragos sensors across 450+ substations to protect critical infrastructure years before regulations require it.    [Download Now](https://hub.dragos.com/thank-you/case-study/dominion-energy-strategic-investment-in-ot-security?hsLang=en) [![Dragos\_INSMStrategySession\_March25\_Socials\_LinkedIn\_1200x628\_Final](https://hub.dragos.com/hubfs/Dragos_INSMStrategySession_March25_Socials_LinkedIn_1200x628_Final.png "Dragos_INSMStrategySession_March25_Socials_LinkedIn_1200x628_Final")](https://hub.dragos.com/strategy-session-nerc-cip-015?hsLang=en) **STRATEGY SESSION** ##### Book an INSM Strategy Session with a Dragos Expert Prepare for NERC CIP-015 compliance with a tailored strategy session led by a Dragos expert. Gain actionable insights to navigate Internal Network Security Monitoring (INSM) requirements and strengthen your OT security posture. [BOOK STRATEGY SESSION](https://hub.dragos.com/strategy-session-nerc-cip-015?hsLang=en) COPYRIGHT © 2026 DRAGOS, INC., ALL RIGHTS RESERVED. For information about how we collect, use, share or otherwise process information about you, please see our [privacy policy](https://www.dragos.com/privacy/?hsLang=en). and [Terms of Service](https://www.dragos.com/terms/?hsLang=en) for more information. ![](https://urldefense.com/v3/__https://s.ml-attr.com/getuid?https*3a*2f*2fattr.ml-api.io*2f*3fdomain*3ddragos.com*26pId*3d*24UID__;JSUlJSUlJSUl!!ObtO0C2TD-k!Vfd64U6OpsMuW83nQ96X9YyxWiTq6RmXYsH_63ZnjCJK00aDGxSTUBPUyTamgAOc$)