Utility Board Package
The regime calendar an operator is judged against, and the twelve questions a director should be asking about it. What management owes the regulator, and what the board records having asked. 15% off buying separately.
What this actually gives you
- A director cannot ask a useful question about a deadline nobody has put in front of them — CIP-015 phases to 2028 and 2030, CIP-003-9 has been enforceable since April 2026, TSA reports in twelve hours.
- Put the regime calendar and the question set in the same hands and the board meeting stops being a presentation — and the oversight log records that it did.
A utility board is asked to oversee a programme measured in enforceable dates, and is rarely given the dates.
Critical Infrastructure Regime Kit — which regimes bind each asset, the NERC CIP 2026-to-2030 calendar, the TSA directive crosswalk, the water regime sheet, twenty control families with the strictest formulation named, the multi-regime incident clock and the assessment programme planner.
Director's Cyber Oversight Kit — twelve questions with good-answer and weak-answer patterns, the oversight evidence log, the committee charter and expertise statement, the annual calendar and the board self-assessment.
Why the pair. CIP-015 phases in to 2028 and 2030. CIP-003-9 has been enforceable since April 2026. TSA's assessment plan runs on three years and its reporting clock on twelve hours. Those are the dates a board is actually overseeing, and a director cannot ask a useful question about a deadline nobody has put in front of them. Put the regime calendar and the question set in the same hands and the board meeting stops being a presentation — the oversight log then records that it did, which is the part that matters afterwards.
Useful in both directions: for the corporate secretary preparing the committee, and for the compliance lead who would rather the board asked the right questions than the alarming ones.
What's in this bundle
Critical Infrastructure Regime Kit
One baseline, every regulator. Power, pipelines, water, rail and nuclear — which regimes bind each asset, what changed in 2026 and what lands by 2030, twenty control families mapped across all of them, and the incident clocks that run in hours.
Director's Cyber Oversight Kit
What a director should ask, and what a good answer looks like. Twelve questions with the good-answer and weak-answer patterns, the evidence log that proves oversight happened, and the charter, calendar and self-assessment regulators, plaintiffs and insurers now expect. No technical background assumed.
What's included
- Complete Library (.zip) — all formats included — fully editable
- Instant download after purchase
- Free updates — re-download when we release new versions
- Practitioner License: unlimited client use (vCISO / MSP)
More from the CISO Marketplace ecosystem
Choose your license:
- Secure checkout via Stripe
- All major cards accepted
- 30-day satisfaction guarantee