In October 2026, FERC’s Office of Electric Reliability, Division of Cyber Security released its annual Lessons Learned from Commission-Led CIP Reliability Audits summarizing findings from audits conducted during fiscal year 2026. Registered entities should assess their internal compliance programs in light of the trends and issues identified by FERC in preparation for future Critical Infrastructure Protection (CIP) audits, as the issues highlighted in these reports are often covered during audits. The report highlights compliance with CIP 002-5.1a as a priority for FERC, including registration for new resources, properly accounting for functions performed by third parties, and using AI in a protected environment.