{
    "profile": {
        "uuid": "b8025f39-eaac-5481-bc55-61179062c9d3",
        "name": "Nuclear CCF — NERC-CIP (2026) Low Impact BES Cyber Systems (CIP-002-5.1a & CIP-003-9)",
        "description": "NERC-CIP Low Impact BES Cyber Systems baseline incorporating CIP-002-5.1a and CIP-003-9 (enforceable April 1, 2026, including Low-Impact Vendor Electronic Remote Access controls).",
        "confidentiality": "Low",
        "integrity": "Moderate",
        "availability": "Moderate",
        "category": "Low",
        "isPublic": true
    },
    "mappings": [
        {
            "profileMappingId": 0,
            "controlId": 30715,
            "controlIdentifier": "GOV-01",
            "controlGuid": "e226b86a-dbf1-5258-9657-ecea6a43b00e",
            "controlTitle": "Security, Compliance & Resilience Program (SCRP)",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 30719,
            "controlIdentifier": "GOV-02",
            "controlGuid": "ecee014f-d8ef-5dad-a1e7-2bef2bc0d0e4",
            "controlTitle": "Publishing Security, Compliance & Resilience Documentation",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 30721,
            "controlIdentifier": "GOV-03",
            "controlGuid": "b62b3702-b182-55c6-8d5a-a733349744f9",
            "controlTitle": "Periodic Review & Update of Security, Compliance & Resilience Program",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 30722,
            "controlIdentifier": "GOV-04",
            "controlGuid": "9e5626ce-0918-5fbd-8524-a22639f3c222",
            "controlTitle": "Assigned Security, Compliance & Resilience Responsibilities",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 30909,
            "controlIdentifier": "AST-01",
            "controlGuid": "d2f6fa08-70a7-5700-aae3-58f7808e524b",
            "controlTitle": "Asset Governance",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 30911,
            "controlIdentifier": "AST-01.2",
            "controlGuid": "7e1e99a6-9154-51e8-b766-889d465712b6",
            "controlTitle": "Stakeholder Identification & Involvement",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 30915,
            "controlIdentifier": "AST-02",
            "controlGuid": "c32c19a7-2ba4-5a21-b0f8-2c7aba87e375",
            "controlTitle": "Asset Inventories",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 30916,
            "controlIdentifier": "AST-02.1",
            "controlGuid": "125a7da1-e294-5063-aa11-f1240657e3a2",
            "controlTitle": "Updates During Installations / Removals",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 30972,
            "controlIdentifier": "BCD-01",
            "controlGuid": "a6dfe651-fda2-5552-a9ce-4033eb3acb2e",
            "controlTitle": "Business Continuity Management System (BCMS)",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 31037,
            "controlIdentifier": "CHG-01",
            "controlGuid": "864b8e8f-44a0-59e1-ba7b-b6825b85637f",
            "controlTitle": "Change Management Program",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 31081,
            "controlIdentifier": "CPL-01",
            "controlGuid": "d283da9b-c556-5a73-b719-af6f8bcee4ac",
            "controlTitle": "Statutory, Regulatory & Contractual Compliance",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 31121,
            "controlIdentifier": "CFG-01",
            "controlGuid": "dcec8b3a-37c2-5f92-9e15-b25d29c1ff3c",
            "controlTitle": "Configuration Management Program",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 31152,
            "controlIdentifier": "MON-01.3",
            "controlGuid": "6b650e04-f348-5ec0-af9e-8ed2b91ce574",
            "controlTitle": "Inbound & Outbound Communications Traffic",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 31249,
            "controlIdentifier": "DCH-01",
            "controlGuid": "d465276e-53f7-5db5-a8f9-7eea0ec77cb8",
            "controlTitle": "Data Protection",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 31336,
            "controlIdentifier": "EMB-03",
            "controlGuid": "16221c13-0b7e-5ae0-9d94-7632613276c1",
            "controlTitle": "Operational Technology (OT)",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 31400,
            "controlIdentifier": "HRS-01",
            "controlGuid": "632ba5c6-15f3-5b3a-bbc3-14bc9a008ead",
            "controlTitle": "Human Resources Security Management",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 31446,
            "controlIdentifier": "IAC-01",
            "controlGuid": "9f472b40-170c-5569-a2b9-6364245bdac1",
            "controlTitle": "Identity & Access Management (IAM)",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 31507,
            "controlIdentifier": "IAC-15",
            "controlGuid": "4f192c70-f7d2-5422-a2b9-10041a46d9b2",
            "controlTitle": "Account Management",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 31560,
            "controlIdentifier": "IRO-01",
            "controlGuid": "7917316f-681b-518c-a157-4f19d77055b2",
            "controlTitle": "Incident Response Operations",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 31658,
            "controlIdentifier": "NET-01",
            "controlGuid": "b209cf7e-d040-5e30-a2db-e0a66f4844e4",
            "controlTitle": "Network Security Controls (NSC)",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 31673,
            "controlIdentifier": "NET-04",
            "controlGuid": "415f9048-8c6a-5308-87b8-638085c186ba",
            "controlTitle": "Data Flow Enforcement – Access Control Lists (ACLs)",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 31718,
            "controlIdentifier": "NET-14",
            "controlGuid": "803f9c65-ecc6-5194-ac0a-d6d59bef7f67",
            "controlTitle": "Remote Access",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 31756,
            "controlIdentifier": "PES-01",
            "controlGuid": "3ea47380-28b4-5f7d-b690-065b540a2b17",
            "controlTitle": "Physical & Environmental Protections",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 31927,
            "controlIdentifier": "RSK-02.1",
            "controlGuid": "1598dc1d-5212-59bd-9b07-26f21c690f01",
            "controlTitle": "Impact-Level Prioritization",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 31928,
            "controlIdentifier": "RSK-03",
            "controlGuid": "5668ff48-effa-51f9-b580-fbaf2f5e4bd8",
            "controlTitle": "Risk Identification",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 31952,
            "controlIdentifier": "SEA-01",
            "controlGuid": "eaeda4ab-f898-54f6-a7ad-326559f9423e",
            "controlTitle": "Secure Engineering Principles",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 31997,
            "controlIdentifier": "OPS-01.1",
            "controlGuid": "59735e28-d1bd-5ea9-9ee1-4fd5b843156f",
            "controlTitle": "Standardized Operating Procedures (SOP)",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 32004,
            "controlIdentifier": "SAT-01",
            "controlGuid": "ad385f66-6fec-59a9-a927-2d9e825405ed",
            "controlTitle": "Security, Compliance & Resilience-Minded Workforce",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 32099,
            "controlIdentifier": "TPM-04",
            "controlGuid": "fa893e4c-5715-50db-b010-3421cf2ad522",
            "controlTitle": "Third-Party Services",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        },
        {
            "profileMappingId": 0,
            "controlId": 32135,
            "controlIdentifier": "VPM-01",
            "controlGuid": "4f92531c-6e25-59f6-8f90-6dfaa1f4cf3a",
            "controlTitle": "Vulnerability & Patch Management Program (VPMP)",
            "catalogId": 0,
            "catalogGuid": "6c1c5194-ba1a-55fd-8f1f-ad8d6ed4231e",
            "catalogTitle": "Nuclear Cybersecurity Common Control Framework (nuclear-ccf) — 2026.1 Edition",
            "catalogUrl": "https://regscale.com/"
        }
    ],
    "exportDate": "2026-10-21T02:08:37Z",
    "exportVersion": "1.0"
}