There’s a growing realization in the utility industry that NERC CIP may no longer be enough to protect utilities against sophisticated cyberattacks.