nerc-cip

An open library of executable compliance policy in OPA Rego v1: CIS Benchmarks, DISA STIGs, NIST, ISO 27001, SOC 2, PCI DSS, HIPAA, GDPR, EU AI Act, NERC-CIP and APAC regulators, each with a uniform compliance_report entrypoint that fails closed. Apache 2.0. Current size: docs/HOW_BIG.md

MuleSoft API-led reference architecture for utility grid operations — integrates SCADA, weather, DER, and field systems with governed agent coordination. Reference/demonstration designs, not a production deployment.

ICS/OT Exposure Intelligence Platform | 8 Protocols | Purdue Model | Asset Inventory | Threat Intel (APT Groups) | Risk Matrix | 72 Hardening Controls | Login System | IEC 62443, NIST 800-82, NERC CIP | Shodan-aware

Reference API designs unifying grid, renewable, and building-optimization data (dsgrid / OpenEMS / REopt). Reference/demo architecture — not a production or certified-compliant system.

Free, open-source cybersecurity scanning tool for power grid, transmission, and substation OT/SCADA networks. Detects ICS protocol exposure, vendor CVEs (Hitachi Energy, ABB), and remote-access risks.

Open-source NERC CIP compliance templates and data room for energy transition infrastructure. Maintained by Infrastructure Velocity, an SDVOSB.

7 OT/ICS tabletop exercise skills for AI agents — follows agentskills.io spec. Compatible with Claude Code, GitHub Copilot, Cursor, VS Code, Gemini CLI, and 30+ agent platforms.

Production-grade, Python-first guides for automating energy trade matching, settlement reconciliation, ISO/RTO reporting, and regulatory filing. A static Eleventy site.

Doctoral Cyber Security Research and applied projects focus on Identity Security,Zero Trust,Cyber Investigations, audit readiness and compliance frameworks

An open-source Critical Infrastructure Protection (CIP) portfolio and OT security simulation lab. Maintained for continuing education and defense sector career preparation.

EnergyTech audit-stream Operator: per-grid-operations AI-decision events hash-chained for NERC CIP + FERC + TSA Security Directives + state PUC + DOE EO 14028 evidence. Every event carries bes_cyber_system_categorization + ot_it_boundary. First Suite verifier with regulatory wall-clock invariant (CIP-008 1-hour reporting window).

Self-directed learning project: maps synthetic vulnerability scan findings to NIST 800-53 and NERC CIP-007-6 controls with a configurable CVSS-based remediation SLA, status tracking, HTML report, and Streamlit dashboard.

OT, ICS, and IIoT Tool with asset discovery, SBOM and supply chain visibility, MITRE ATT&CK ICS mapping, zone and conduit policy with blast radius analysis, evidence locker and safety gates, compliant with IEC 62443, NIST 800-82, and NERC CIP, supporting golden image drift detection and IoT lifecycle management.

AGPL-3.0 reference impl of EnergyTech audit-stream + 2-axis BES/OT-IT vault. Runs Continental Grid Operator × VendorE GridSense 6.x trajectory end-to-end. Anchors the FIRST Suite numeric regulatory wall-clock invariant (CIP-008 1-hour) in working code.

Converged IT/OT security reference: Purdue model, ISA/IEC 62443 zones and conduits with SL-T assignment, IT-to-OT attack paths, NERC CIP evidence mapping

Bicep demo of an Azure Enterprise-Scale landing zone for an existing Entra tenant and two sandbox subscriptions: management-group hierarchy, Azure Policy guardrails (DoNotEnforce by default), PIM-ready RBAC, report-only Conditional Access, and NERC CIP evidence mapping. No paid always-on resources; preflight and what-if before any deploy.

Enterprise-grade defense framework for AI agents. Five-layer pipeline (sanitizer + injection detector + RBAC + audit + human gate). MCP-native. HIPAA / SOC 2 / NERC CIP ready. Apache 2.0.

EnergyTech compliance Evidence Bundle profile: NERC CIP-002 through CIP-014 + TSA SD-2021-02C + EO 14028 + FERC Order 2222 + state PUC prudency review. 12 obligation families covering 53 required evidence kinds, the largest Suite evidence bundle.