Small team, full obligations
One compliance lead juggling CIP-003, CIP-004 and CIP-007 clocks alongside other duties.
For public power
NERC CIP for municipal and public power utilities, without a cloud contract.
Public power utilities carry the same CIP obligations as the largest IOUs, usually with a fraction of the staff. CIP Sentry runs your whole program on a server you own, which is the way many city IT departments and councils prefer to buy.
Public power utilities are community-owned and publicly accountable. That shapes how they buy software: carefully, through public processes, and with a strong preference for keeping sensitive infrastructure data under local control. CIP Sentry was built for exactly that model.
The challenges we hear most
Procurement that favors on-premises
City IT policies, data residency concerns and council approvals often make SaaS with BCSI a hard sell.
Knowledge that walks out the door
When the person who ran CIP retires, the program lives in their inbox and spreadsheets.
How CIP Sentry helps
Built for how public power utilities actually work.
Runs on city-owned hardware
No vendor cloud, no inbound connections, no vendor remote access. Your IT team controls the server, backups and certificates.
Right-sized for low and medium impact
Start with the Low Impact Plan and policies, and grow into medium impact modules only if you need them.
Institutional memory
Every approval, change, test and piece of evidence is recorded against the requirement, so a new hire can pick up the program.
Quote-based, budget-friendly pricing
Priced to your registered functions and number of sites, with the paperwork public buyers need (W-9, insurance certificate, sole-source justification support).
Standards that matter most for you
CIP-003Security Management ControlsPolicies, CIP Senior Manager approvals and a low impact plan that stays reviewed.CIP-002BES Cyber System CategorizationRate every BES Cyber System high, medium or low impact and keep the list current.CIP-004Personnel & TrainingTraining, personnel risk assessments, access authorization and timely revocation.CIP-007System Security ManagementPorts and services, 35-day patch cycles, malware, logging and accounts.CIP-008Incident Reporting and Response PlanningResponse plans, reportable incident handling and 15-month plan tests.
Questions from public power utilities
We only have low impact assets. Is CIP Sentry overkill?
No. Many public power utilities only need CIP-002 and CIP-003. CIP Sentry's Policy & Low Impact module covers the policies, the Attachment 1 plan including vendor electronic remote access, and the 15- and 36-month clocks, and quotes are sized to that scope.
Can we buy through our standard procurement process?
Yes. We provide quotes, W-9, a certificate of insurance, security documentation and a completed NATF supply chain questionnaire, and we can support a sole-source justification or RFP response.
Request a quote
See CIP Sentry on your own terms.
Get a quote sized to your registered functions and impact levels, and a live walkthrough on sample data. No sales pressure, no cloud account, no commitment.