Advertisement

Advertisement

Cybersecurity in the NEC: CQD Spotlight

Nov 12, 2025
NECA Code Question of the Day logo
Sponsored content

CQD Spotlight features questions and answers from NECA and ELECTRICAL CONTRACTOR’s Code Question of the Day program. Whether you’re a seasoned contractor, an apprentice or simply a National Electrical Code enthusiast, you’ll gain knowledge with a nod to the legacy of Charles M. “Charlie” Trout, a true NEC legend.

Advertisement

Advertisement

Advertisement

Advertisement

Advertisement

CQD Spotlight features questions and answers from NECA and ELECTRICAL CONTRACTOR’s Code Question of the Day program. Whether you’re a seasoned contractor, an apprentice or simply a National Electrical Code enthusiast, you’ll gain knowledge with a nod to the legacy of Charles M. “Charlie” Trout, a true NEC legend.


From the archives— Oct. 21, 2024

Section 110.3(A)(8) requires examination of electrical equipment for life safety systems that are network-connected for the ability to withstand cybersecurity attacks. How would an electrical contractor comply with this? What should an authority having jurisdiction be asking for to comply with this Code section?

The manufacturer will have some guidance on how network-­connected electrical equipment has been evaluated for cybersecurity.

Additionally, the National Electrical Manufacturers Association (NEMA) has a resource called the “NEMA Guideline Document-NEMA CY 70001-2023 Cybersecurity Implementation Guidance for Connected Electrical Infrastructure.” This guideline document provides general information to aid in compliance with the cybersecurity requirements in the NEC, NFPA 72 and NFPA 79.


From the archives— Feb. 15, 2023

With the increased use of network-connected equipment, the demand for network cabling installations is higher than ever. Does the NEC have rules restricting how many Cat. 6 cables can be installed in a conduit?

Great question. Yes, the NEC does indeed provide guidelines for installing cables in conduits and raceways. Assuming that the “conduit” you are referring to in the question is EMT, Section 358.22 provides the general rule for EMT fill. This section points to Chapter 9 for conductor/cable and fill. Table 1 establishes the maximum cross-sectional area that can be filled for conduit or tubing based on the number of conductors or cables installed:

  • One cable: 53%
  • Two cables: 31%
  • Over two cables: 40%

Assuming there will be more than two Cat. 6 cables installed, the EMT could be filled up to 40% of the EMT cross-sectional area.

The area of Cat. 6 cable is not provided in the tables in the NEC. Table Note (5) states that when the area of conductors or cables are not included in the Chapter 9 tables, the actual size of the conductor or cable shall be used. The actual size of a Cat. 6 cable can be found in the manufacturer’s literature or on their website.

Another consideration is also Section and Table 725.144, which provides additional requirements for the transmission of power and data. 

Get more out of this discussion through the CQD Spotlight podcast.

 

Post sponsored by Eaton Corp.

The 2023 NEC recognizes cybersecurity as integral to electrical safety. Section 110.3(A)(8) requires network-connected life safety equipment to be examined for its ability to withstand cyberattacks. The question is, what is life safety equipment? Answer this question by understanding that the goal is to ensure systems such as fire alarms, emergency lighting, reliable power and circuit protection cannot be compromised through digital intrusion. Contractors should verify manufacturer documentation or listings showing evaluation to recognized standards, such as UL 2900, ANSI/ISA 62443 or the NIST Cybersecurity Framework, or include a cybersecurity evaluation of the system in their proposal.

Section 240.6(D) focuses on remotely adjustable circuit breakers. These devices may have ampere ratings based on their adjusted setting only when both local restricted access and secure remote access are achieved. Remote interfaces must either be local and nonnetworked or networked systems evaluated for cybersecurity or supported by a documented risk assessment. Informational notes reference ISA 62443, UL 2900 and NEMA CY70001-2023 as key guidance documents.

Section 708.7 adds cybersecurity provisions for critical operations power systems (COPS). Where control of COPS functions occurs through a network, the system must be either limited to a direct, nonnetworked interface or verified through cybersecurity evaluation or assessment. Acceptable documentation includes certifications from ISCI, NRTLs or manufacturer­-specific assessments.

Together, these sections establish a consistent framework: cybersecurity is now a fundamental safety consideration in electrical design. Equipment that can be accessed or controlled remotely must demonstrate resilience against unauthorized access. As connectivity expands, electrical safety and cybersecurity are no longer separate disciplines—they are inseparable elements of a reliable, Code-compliant power system.

    Learn more about cybersecurity from Eaton →

    Advertisement

    Advertisement

    Advertisement

    Advertisement

    featured Video

    ;

    Turn Jobsite Minutes into Savings: Hassle-Free LED Driver Replacement with FieldSET® by eldoLED®

    Because your time matters, there’s a faster way to replace LED drivers in the field with FieldSET programmable LED drivers. Hassle-free configuration using ONE handheld programming tool, no internet needed!

    Advertisement

    Related Articles

    Advertisement