establish the obligation to risk management and report incidents of a certain scale to the operators of essential services and digital service providers; > NERC CIP v infrastructure protection prepared by the North American Electric Reliabili ty Corporation.