NERC CIP CIP-008 R4.1: CIP-008-6 R4.1: Notification content: functional impact, attack vector, level of intrusion

Notify the E-ISAC and, for entities under United States jurisdiction, the National Cybersecurity and Communications Integration Center (NCCIC, now within CISA) or its successor, of Reportable Cyber Security Incidents and attempts to compromise, unless prohibited by law, with initial notifications and updates that include, to the extent known, the functional impact, the attack vector used and the level of intrusion achieved or attempted.