NERC CIP and IEC 62443 exist because the bulk electric system can't tolerate data walking out the door. We'll build the whole system inside your perimeter instead: the agents, the orchestration, and the models that carry your utility's real work, and operational data never leaves your network.
Every deployment starts on-site, with the people who do the work.
Air-gapped AI for utilities eliminates the compliance violations created when operational technology data from SCADA systems and grid management platforms is transmitted to cloud infrastructure.
NERC CIP standards mandate strict cybersecurity controls for the Bulk Electric System (BES). CIP-003 through CIP-013 establish requirements covering electronic security perimeters, personnel and training, system security management, incident reporting, recovery planning, information protection, physical security, configuration management, vulnerability assessment, and supply chain risk management. The scope is comprehensive and the enforcement is real - NERC can levy penalties up to $1 million per violation per day. Energy and utilities represent one of eleven regulated industries where the structural conflict between cloud AI and data security is most acute. Critical infrastructure AI on-prem is the only architecture that resolves this conflict.
IEC 62443 governs industrial automation and control systems (IACS) security. The standard establishes security levels for zones and conduits within OT networks. Introducing cloud AI processing of operational data creates an external conduit that must be evaluated against the security level requirements of each zone it touches. For many critical infrastructure environments, this external conduit simply cannot satisfy the required security level.
FERC oversight adds federal enforcement authority - government agencies at every level regulate utility cybersecurity posture. The TSA Pipeline Security Directives (post-Colonial Pipeline) added additional cybersecurity requirements for pipeline operators. DOE critical infrastructure guidelines emphasize air-gapped architectures for the most sensitive operational environments. The common thread: operational technology data from SCADA systems, grid management platforms, and pipeline monitoring systems cannot be transmitted to cloud infrastructure without creating compliance exposure and expanding the attack surface. Energy AI without cloud dependency is not a preference - it is a structural mandate for critical infrastructure operators, paralleling the isolation requirements faced by defense contractors handling CUI under DFARS.
Air-gapped inference energy operators can trust. "No data leaves your facility" is not marketing language - it is a description of network architecture.
Operational data never leaves your facility perimeter. Prompts travel from workstation to server over internal network only. Complete air-gap capability eliminates all external attack surface. Data-sovereign AI utilities demand - achieved through physical air-gap architecture.
A physical server in your facility, running on your power, inside your electronic security perimeter. You own it outright. Not a hosted service with "local" branding on someone else's box.
Complete network isolation, no external connections of any kind. The models are loaded and verified before it lands, so the system works the day it's racked. Zero attack surface expansion.
A general model knows the grid in the abstract and nothing about the one you run. It's never opened your asset register, doesn't know your outage codes, can't tell a real NERC evidence binder from a textbook diagram. We build for the utility you operate, not the abstraction.
Island Mountain builds the agents and the orchestration that carry the work stacking up between shifts: outage and incident reporting, regulatory filings, asset and maintenance documentation, field-report synthesis, the compliance evidence an auditor is going to ask for. It runs on current open-weight models like Kimi K3, ZAI GLM 5.2, Qwen 3.8+, and Nous Hermes 4, served through Ollama or vLLM behind an OpenWebUI front end, or whatever open weights fit the task. All of it governed by our own agentic orchestration and the Woven Security Fabric, so every action carries an identity, an approval, and a receipt, and the credentials expire when the task is done. Operational data never leaves your network to make any of it happen.
When the work needs a model that speaks your utility, we'll build one. Reasoning models and small language models from scratch, trained to orbit your utility's ontology: your grid and asset map, your maintenance procedures, your regulatory calendar. It learns your terminology and your cadence, not a generic operator's.
It air-gaps completely for the OT and critical-infrastructure work that demands the separation, and reaches out only when a task genuinely needs to. You decide, workflow by workflow.
Then we hand it back. On-site onboarding, SOPs your operators can follow at 3 a.m., the keys dropped into your team's hands so they run and rework the workflows without a phone call. Want the upkeep off your OT staff's plate? We offer tiered support sized to the utility, and we plug in wherever that's easiest. This is your utility's legacy. We build it alongside you, and we won't call it done until your people can run it without us.
These aren't chat prompts. They're agentic workflows the orchestration runs start to finish, each step carrying its own identity and receipt, and no operational data leaves your network.
On-prem AI for predictive maintenance: analyze equipment sensor data, maintenance logs, and failure histories to identify patterns and predict maintenance needs. Process SCADA telemetry data locally without exposing operational patterns to cloud services.
Secure AI for substation data: draft operations reports, shift summaries, and system performance documentation. Summarize complex operational data into clear narrative reports for regulatory submissions and internal review.
Assist with compliance evidence documentation, audit preparation, and regulatory filing drafts. Process sensitive security assessment data entirely on-premises without cloud exposure.
Local AI for oil and gas operations: analyze pipeline integrity data, flow measurements, and anomaly detection results. Local AI for pipeline monitoring processes operational data from SCADA systems without transmitting sensitive infrastructure information to cloud APIs.
Generate after-action reports, incident timelines, and restoration documentation during and after outage events. Process operational data in real-time without cloud dependency.
Run an on-prem LLM for FERC compliance: draft FERC filings, state regulatory submissions, and compliance documentation. Summarize complex operational and compliance data into clear regulatory narratives.
Kimi K3, ZAI GLM 5.2, Qwen 3.8+, Nous Hermes 4, or whatever's carrying the load the month we deploy, served through Ollama or vLLM behind OpenWebUI. The open-weight field moves quarter to quarter, and our answer moves with it. We run what fits the task in front of us, not last year's benchmark darling.
When nothing off the shelf speaks your utility's language, we build it. Reasoning models and small language models from scratch, trained on your ontology: your asset map, your maintenance procedures, the way your crews write up a job. Compact, precise, and nobody else's.
Nothing runs unsupervised. Our agentic orchestration and the Woven Security Fabric wrap every model call: access scoped to the task, credentials that expire, a receipt an auditor can read. Air-gapped where the OT side demands it, cloud-connected only where a task earns it.
The cloud creates external connections to your OT environment. The hardware stays inside your electronic security perimeter.
| Cloud AI | Island Mountain build | |
|---|---|---|
| Year 1 Cost | $15,000 - $60,000 (25 users) | One-time purchase (quoted to the deployment) |
| Year 3 Cumulative | $45,000 - $180,000 + compliance costs | Electricity only (~$1,200 - $2,400/yr) |
| Year 5 Cumulative | $75,000 - $300,000 + compliance costs | Electricity only |
| OT Data Location | Cloud provider servers | Your facility. Air-gapped. |
| NERC CIP Compliance | External conduit complicates ESP | Inside your security perimeter |
| Attack Surface | Expanded by external connections | Zero expansion. Air-gapped. |
| Per-Token Fees | $15 - $60 per million tokens | None. Unlimited use. |
| SCADA Integration | Not available from cloud AI | Not included. General-purpose AI. |
| Vendor Lock-In | Complete | None. Permissive open-source licenses. |
Knowing the boundaries matters more than knowing the features.
Island Mountain hardware does not connect to SCADA systems, DCS platforms, or industrial control systems. The AI runs through OpenWebUI - a browser-based chat interface on the IT network. It processes data you provide to it; it does not read directly from OT systems.
This is an inference tool, not a control system. It does not manage grid operations, dispatch generation, or control substations. It assists with analysis, documentation, and reporting - not real-time operational decisions.
The system is a general-purpose AI that assists with documentation, analysis, and drafting around your existing modeling tools, not a substitute for power flow analysis, load forecasting, or energy market simulation.
After the 30-day included support period, your organization is responsible for OS security updates, model updates, and general system maintenance. For air-gapped deployments, updates are applied via physical media.
NERC CIP compliant AI infrastructure that operates entirely within your electronic security perimeter.
NERC CIP-005 (Electronic Security Perimeters) requires that all external connections to networks containing BES Cyber Assets be identified, documented, and protected with electronic access controls. Introducing cloud AI processing of operational data creates an external routable connection that must be documented in the ESP and subjected to all CIP-005 requirements - including intrusion detection, access logging, and vulnerability assessments of the connection path.
NERC CIP-011 (Information Protection) requires identification and protection of BES Cyber System Information (BCSI). Operational data from grid management systems often qualifies as BCSI. Transmitting BCSI to cloud infrastructure requires documented protections for data in transit and at rest on third-party systems - a significant compliance burden that air-gapped local processing eliminates entirely.
IEC 62443 AI server requirements establish security levels (SL 1-4) for industrial automation zones. Higher security levels restrict external communications more severely. For zones rated SL-3 or SL-4, cloud AI connections are difficult or impossible to justify under the standard's requirements for network isolation and data flow control. Local AI hardware operates entirely within the zone, satisfying isolation requirements without architectural compromises.
The TSA Pipeline Security Directives (2021-2022) mandate cybersecurity requirements for pipeline operators including network segmentation, access controls, and continuous monitoring. DOE critical infrastructure guidelines emphasize defense-in-depth architectures. Both frameworks favor air-gapped processing of sensitive operational data over cloud-dependent solutions.
Disclaimer: This section describes the general regulatory environment regarding AI and critical infrastructure cybersecurity. It is not legal or compliance advice. Consult your NERC compliance team, qualified cybersecurity counsel, or your regional entity for guidance specific to your registration, asset classification, and operational context.
Power & Installation: All Island Mountain systems require a dedicated 208V/30A power circuit (NEMA L6-30R). This is standard in server rooms and data closets. Most utilities and energy companies with an existing server closet already have this infrastructure or can add it for $500-$2,000 through a licensed electrician. The system fits in a standard 4U rack space. Average power draw under typical inference loads is 1.5-2.5 kW.
Yes. Cloud AI creates external routable connections that must be documented in your Electronic Security Perimeter under CIP-005, subjected to access management requirements, and continuously monitored. Operational data transmitted to cloud AI may qualify as BES Cyber System Information (BCSI) under CIP-011, triggering additional protection requirements. On-premises AI from Island Mountain operates entirely within the Electronic Security Perimeter.
Island Mountain supports outage and incident reporting, grid and asset documentation, NERC CIP compliance evidence, maintenance and field-report synthesis, and regulatory filing drafting. The system runs current open-weight models for operational analysis and documentation, and custom models we build for your utility. All processing occurs air-gapped on your own hardware inside your facility.
Cloud AI costs $50 to $200 per user per month, totaling $15,000 to $60,000 per year for 25 users - plus significant compliance costs for documenting and securing the external connection under NERC CIP. An Island Mountain build is a one-time purchase, sized and quoted to your workload, with no ongoing compliance overhead. The system eliminates the external routable path entirely.
Yes. Models are loaded and verified before it lands. The system operates with zero external network connections. Updates are applied via physical media. Designed for the most restrictive operational environments where complete network isolation is required.
Island Mountain is an engineering practice, not a compliance authority. References to NERC CIP, IEC 62443, FERC regulations, TSA Pipeline Security Directives, or related critical infrastructure frameworks on this page reflect factual descriptions of data handling mechanics - not legal, regulatory, or compliance advice. Consult qualified counsel for compliance determinations specific to your organization and jurisdiction.
Municipal utility serving 200,000 customers. Grid operations data stays inside our security perimeter. NERC CIP auditors have zero questions about our AI deployment.
Scenario: Municipal UtilityPipeline operator with 1,200 miles of transmission. Operational data never leaves our facilities. Air-gapped deployment was the only architecture our security team would approve.
Scenario: Pipeline OperatorRenewable energy company with 15 generation facilities. On-premise AI for renewable energy operations: maintenance data and performance analytics processed locally across all sites. Cloud AI was never compatible with our security requirements.
Scenario: Renewable Energy CompanyOne conversation. No sales pitch. Tell us about your facility's AI needs and we will spec the right system.
Or call directly: 1-341-441-8740
See all eleven industries we serve or explore: Defense Contractors · Government