This proposal is driven in part by FERC’s concern that the existing CIP reliability standards only require regulatory reporting if cyberattacks have an impact on bulk-power system reliability.