The rules machines answer to.The rules machines answer to.

Before a change to a grid system, check where the software came from and that nobody altered it.

Manage supply chain risk, including the integrity and authenticity of every vendor's software and patches.

The federal regulator approves the reliability standards for the bulk power system and can enforce them.

Monitors and enforces the standards across 14 western states, Alberta, British Columbia and northern Baja California.

Texas runs its own grid. Texas RE enforces the reliability standards there, and the state commission oversees ERCOT.

The Department of Energy's model for measuring and raising cybersecurity at energy companies.

A voluntary framework for managing the risks of AI systems across their life.

Autonomous weapon systems get senior review before development and again before they are fielded.

Defense contractors must meet set cybersecurity levels to handle controlled information.

Canadian provinces make the North American reliability standards mandatory through their own regulators.

From January 20, 2027, machines whose behaviour evolves through machine learning need an independent assessment.

High-risk AI, including AI in critical infrastructure and machinery, must record events over its lifetime.

Makers of connected products report exploited flaws within 24 hours, and meet security requirements from December 2027.

Energy, transport and other essential services must manage cyber risk and report serious incidents.

Security controls for the systems that generate, move and store power, gas, oil and heat.

Security for industrial automation, from how a product is built to how a plant runs it.

Safety for industrial robots, revised in 2025 to cover cybersecurity where it affects safety.

Carmakers need an approved process for cybersecurity and for software updates, and must track the software versions that matter.

A management system for organisations that build or use AI.