By Rich Heidorn Jr. FERC on Thursday ordered NERC to lower the threshold for mandatory reporting of cyber incidents, saying that the lack of any reports in 2015 and 2016 suggests gaps in the grid’s protections (RM18-2, AD17-9). NERC’s Critical Infrastructure Protection (CIP) reliability standard only requires reporting of incidents...