GRCLibrary.ai

Annex

Energy and Utilities Sector Requirements Annex

This annex describes how organizations operating in energy generation, transmission, distribution, supply, oil and gas, drinking water, waste water, and district heating can use the core library while satisfying the overlay obligations imposed by sector-specific regulators and standards. It covers operational technology (OT) and industrial control system (ICS) cybersecurity, critical-infrastructure-protection standards, sector incident reporting, physical-cyber convergence, and supplier and component security particular to energy and utilities.

Type
Annex
Version
0.0.12
Date
2026-10-17
Owner
Chief Compliance Officer
Approving authority
Governance Library Maintainer
Classification
Public
Confidentiality
Public
Category
Compliance: Sector-Specific
Review frequency
Annual and upon material sector-regulator, IEC 62443, or critical-infrastructure-protection-standard change
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • Purpose
  • Applicability triggers
  • Overlay area 1: critical-infrastructure cybersecurity baselines
  • Overlay area 2: OT and ICS cybersecurity
  • Overlay area 3: physical-cyber convergence
  • Overlay area 4: sector incident reporting
  • Overlay area 5: supplier and component security
  • Overlay area 6: resilience and continuity
  • Library gaps requiring additional documentation
  • Framework alignment
  • Limitations

Frameworks it maps to

Related documents