NERC and NEI (Nuclear Energy Institute) are attempting to define “bright lines” that use the size of generation, load, and facilities as tests for registration and reliability standard compliance for cyber security. However, cyber security is about interconnectivity and system impacts. It is important to understand how data and processes impact the operation of the system. The concern should only shift to the component to consider specific scenarios or to measure some of the possible consequences that could affect systems.
