For utility + energy operators
Ship utility change faster. CIP evidence already built. Audit-ready packet for your regional entity.
Describe the change — firmware update, relay replacement, SCADA point addition — and the plan comes back naming the evidence artifacts your auditor will expect. Is this asset classified as Bulk Electric System (BES)? Does it trigger a NERC CIP-010 baseline change? Does it touch your Electronic Security Perimeter (ESP)? Surfaced automatically. Works for large utilities that already have compliance teams and for smaller co-ops that need the scaffolding without hiring a dedicated NERC CIP analyst. Full compliance-tracking modules ship in the Professional tier (Coming Soon).
The regulations you’re accountable for
If you operate Bulk Electric System (BES) assets, these are non-negotiable. We bake them into the plan rather than leaving you to reconcile two systems.
- NERC CIP-010 — Configuration change management — the planner treats baseline config as a tracked entity.
- NERC CIP-005 — Electronic Security Perimeter — change impact on ESP flagged at scoping.
- NERC CIP-007 — System security management — patch + access change requirements surfaced.
- FERC Order 2222 — DER aggregation — relevant for any change touching aggregated resource participation.
What generic PM tools miss
Generic PM tools don't know what a Cyber Asset is, let alone whether a firmware update on a relay requires a baseline change record vs a routine maintenance note. Copilot will cheerfully generate a plan that misses the CIP-010 hook entirely.
If you run a dedicated compliance team, they're already stretched — adding another system slows them down. Your ops teams need structured project planning that gets the CIP vocabulary right day-to-day without a compliance handoff on every change.
If you're a co-op or smaller utility without that team — you need this scaffolding even more. The planner asks the asset-classification question up front, names the evidence artifacts, and makes the audit-trail export format something your regional entity auditor will recognize.
For your role
NERC CIP Analyst
Asset classification, ESP impact, baseline-change context surfaced at capture. The evidence artifacts your regional auditor expects, named up front — so your team's day-to-day changes land in your queue already pre-scoped.
Operations / Substation Engineer
Firmware updates, relay swaps, SCADA point additions — get a structured plan back with the CIP-010 hook already flagged. No more bouncing between PM tool and compliance spreadsheet to figure out which framework applies.
Plant / Site Manager
Day-to-day changes that don't need the enterprise compliance suite still get the CIP vocabulary right. The small changes that become the next audit finding stop happening — because they have structure too.
Co-op / Smaller Utility Engineer
Without a dedicated compliance team, you need the scaffolding the planner provides — asset-classification question up front, evidence-chain hints baked in, audit-trail export an auditor will recognize. The same rigor as a major utility, without the headcount.
What changes when you use ChangePilot
Items below are tagged Available today or Coming Soon so you know exactly what ships in v1 vs what’s on the Professional-tier roadmap.
Plain-English scoping that speaks the CIP vocabulary
Type “firmware update on the SEL-421 line differential relay” and the planner pulls out the asset + the scoping questions (asset classification, dependent systems, baseline-change context) a CIP analyst would ask up front — not the generic ones a task manager would. Available today. (Dedicated CIP-005 / CIP-007 / CIP-010 workflow gates ship in the Professional tier — Coming Soon.)
Audit-trail PDF that holds up for an internal review
Every status change, every approval, every evidence upload — one-click PDF export with user + timestamp + justification + linked artifacts. We don't claim to ship a NERC-CIP-templated audit packet (the workflow modules will), but the underlying project record is signable + exportable today.
Built for the day-to-day changes, not just the quarterly audits
Team tier ($49/mo) is unlimited projects. Compliance suites built for the quarterly audit are heavyweight for the daily firmware patch or relay swap — so the small stuff lives in spreadsheets, and that's where the next finding comes from. ChangePilot is for the routine changes that need structure but not enterprise-grade overhead. Available today.
Capture vendor advisories + change requests from email — no retyping
SEL emails a security advisory: “R114 → R119 firmware update for the SEL-421, address before next maintenance window.” Highlight the message, right-click → Add to ChangePilot, get a structured plan back in seconds with the asset-classification question, the CIP-010 baseline-change context, and the evidence artifacts your auditor will expect already named. Same workflow applies to Outlook, Teams, Slack, or any web page. Drafts land in your inbox so you can triage a backlog of advisories at once. Available today via the Chrome extension; Outlook + Teams native add-ins coming.
Coming Soon: full CIP-aware change workflow + lessons feedback loop
BES asset classification as a typed entity, ESP/EACMS impact flagged at scoping, evidence-chain templates a regional entity auditor would recognize, lessons-from-prior-changes surfaced at capture — these ship as the Compliance + Change Management modules in the Professional tier. v1 customers get structured planning + the CIP vocabulary in the planner today; the workflow modules layer on when they ship.
Try it — here’s a prompt that works for your world
Firmware update on the SEL-421 line differential relay protecting the 230 kV Cottonwood-Juniper circuit. Upgrading from R114 to R119 per vendor security advisory. Relay is a Medium Impact BES Cyber Asset inside an ESP. Change touches CIP-005 (firmware source + verification), CIP-007 (patch management), and CIP-010 (baseline config). Need pre-change baseline snapshot, signed change record, post-change validation against protection test plan, and rollback procedure on file.
Paste this into /screener/actions and compare the result to what Copilot gives you for the same prompt.
Test it with a CIP change you're planning.
Paste a real CIP-010 candidate. The plan we generate should name the right evidence artifacts. If we miss one your auditor cares about, tell us — getting this vertical precisely right is the difference between a curiosity and a buy.
Other industries we know
Don't see your industry? The planner works for any operationally-serious team — construction, agriculture, services, even multi-department HR rollouts. Try it free.