What is NERC CIP-010?

More context

CIP-010 makes the baseline configuration a first-class compliance artifact: what is installed, what is enabled, and how the system is configured must be documented, and deviations from that record are the trigger for investigation. This is configuration drift management written into a mandatory, enforceable reliability standard.

Utilities and grid operators typically run these environments on-premises or fully isolated. CISGuard fits this model with on-premises and air-gapped deployment, continuous scanning against CIS Benchmarks as hardened baselines, drift detection when a monitored configuration deviates, and timestamped audit-ready reports for compliance evidence.