ON-DEMAND WEBINAR
NERC CIP-015: Monitoring Deep Inside Critical Networks to Keep Adversaries Outside

Original Air Date: 8/19/25
Meet the Speakers

Tim Conway
ICS Curriculum Lead

.png?width=200&height=200&name=Robert%20M.%20Lee%20-%20Dragos%202024%20-%20Teal%20Circle%20(1).png)
Robert M. Lee
Co-Founder & CEO

NERC CIP-015-1 has been approved, introducing new requirements for Internal Network Security Monitoring (INSM) across all High Impact Bulk Electric Systems (BES) Cyber Systems with and without External Routable Connectivity (ERC) and Medium Impact BES Cyber Systems with ERC.
- A detailed breakdown of the three key aspects of CIP-015: collecting, detecting, and evaluating internal network activity
- What effective INSM really looks like in practice
- Actionable guidance to help compliance and security teams prepare for CIP-015
NERC CIP-015: Strengthening Cybersecurity from Within
Authored by industry expert Tim Conway of the SANS Institute, this guide details the NERC CIP-015-1 standard and offers actionable guidance to help your organization prepare for this upcoming regulation.
Dominion Energy Success Story
Discover how one of America’s largest utilities deployed Dragos sensors across 450+ substations to protect critical infrastructure years before regulations require it.
Book an INSM Strategy Session with a Dragos Expert
Prepare for NERC CIP-015 compliance with a tailored strategy session led by a Dragos expert. Gain actionable insights to navigate Internal Network Security Monitoring (INSM) requirements and strengthen your OT security posture.