But a lack of specifics also means a company could be compliant from an audit standpoint without necessarily achieving the intended goal: security.The standards and related audit requirements apply only to ???bulk electric systems,??? and most organizations already know if they are subject to NERC standards.