Devices capable of subjecting transformers and other critical infrastructure to localized, but destructive, levels of EMP can be built from readily available equipment from local electronics stores and instructions from the internet. The utilities industry has done an excellent job of ensuring our electric reliability. Last year, when the Department of Energy announced $45 million of funding for energy sector security, it chose to distribute a https://konasaranews.com/technology/understanding-your-smart-meter-key-facts-benefits/ chunk of that money to a research project focused on preventing cyber-physical threats to distributed energy resources (DER) using zero-trust authentication. Bramson tells Dark Reading that “the gap comes from having more than one team owning cybersecurity, and the potential opportunity for assumptions of ‘the other side’ covering some aspect of the system.” IT and OT might involve different machinery, but ever since cyber-physical attacks rose to prominence in the late 2000s and 2010s, the considerations of each have affected both. On the physical attack front, in February 2023, the Electricity Information Sharing and Analysis Center (E-ISAC) disclosed that physical attacks on the power grid had risen a full 71% in 2022 (and 20% over 2020 numbers).
As preparations get https://www.canisciolti.info/tips-for-the-average-joe-4/ underway for the ninth GridEx, in 2027, Ball says participation in the exercises alone isn’t enough to bolster grid security. An AI model processes the results and can classify events based on patterns in the optical signal as a result of perturbations happening around the fiber cable. A file-cabinet-size unit plugs into a substation and sends light pulses down existing fiber optic cables 30 miles in each direction. Already, a number of utilities in the United States are using AI integrations in their security and monitoring processes.
Building off the success of GridEx, APPA hosted its first ever cyber mutual aid exercise, Safe Haven, in fall 2025, funded by DOE. Electric utilities plan and regularly exercise for a variety of emergency situations that could impact their ability to provide electricity. APPA and public power utilities play a leadership role on the ESCC, which includes utility CEOs and trade association leaders representing all segments of the industry. The ESCC serves as the principal liaison between the federal government and the electric power sector, with the mission of coordinating efforts to prepare for, and respond to, national-level disasters or threats to critical infrastructure. One important venue for this collaboration is the Electricity Subsector Coordinating Council (ESCC). The electric power industry works closely with the federal government, including NERC, FERC, DOE, and DHS, on matters of critical infrastructure protection.
Enjoy more free content and benefits by creating an account
Fortunately, digital technology can aid in better utilizing the existing grid, leading to an increased deployment of digital technology to control, monitor, and maintain transmission and distribution of power 2,11. The Grid Security Design Guide is designed for utility companies implementing a holistic security architecture that includes Cisco Cyber Vision and Cisco networking hardware. With a focus on safeguarding Critical National Infrastructure, find out how our integrated and intelligent approach to OT security allows organisations to gain an initial overview and understanding of the existing OT security posture in order to identify key priority areas for improvement. While there she worked extensively on various efforts, including energy resilience exercises, energy project planning tools, government partnerships, defense critical electric infrastructure, and more. By combining these tools with strong processes and people, the backbone of our modern society can remain reliable, resilient, and protected regardless of how the threat landscape evolves.
Her previous experience also includes supporting energy security programs for the U.S. Current permitting processes delay essential energy infrastructure, compromising national defense, economic stability, and America’s competitive edge—with essential projects taking up to years to build. SAFE’s Center for Grid Security provides policy analysis and recommendations to build out the national power grid – ensuring America’s energy and national security. Modern platforms that provide unified visibility, automation, and device lifecycle management can play an important role in helping utilities proactively address vulnerabilities and embrace innovation.
- Along with all the responsibilities that come with navigating the organization toward increased success and reduced risk, how leaders interact with others sets the tone for the rest of the company.
- The sections that follow examine six of the most effective practices for ensuring power grid security in the modern threat landscape.
- It includes an interconnected network of substations, transmission lines, control systems, and intelligent devices that work together to keep electricity flowing reliably.
- Most of the time, there may be a temporary disruption to radio communications or an increase in the ability to see the Aurora Borealis.
- Once an attacker gains access to an unsecured PCN, simple tools enabling communication in the specific protocol may be used to control devices crucial for grid operation.
In collaboration with industry, PNNL is creating systems with built-in resiliency and cybersecurity controls that enable energy delivery systems to keep working regardless of threats. PNNL plays a lead role in CRISP, which uses advanced sensors and data analysis to identify new and ongoing cyber threats. The federal government and its national laboratories complement these efforts as part of their mission to protect national and economic security. With attacks becoming more frequent and more severe, it is imperative that utilities continue to evolve and mature their cybersecurity posture to ensure operational uptime, improve situational awareness, minimize risk and promote the safety of employees and the community. Leidos helps clients answer this question by enhancing the visibility and the status of an organization’s key safety systems (i.e., the barriers used to control the hazards within its operations). Pre-built models for anomaly detection, user behavior analytics, and threat classification can be customized for energy sector environments.
As the grid evolves through digitization, IoT expansion, and increased automation, so does its exposure to cyber and physical threats. The Ukraine 2015 power grid attacks showcased how attackers can remotely control circuit breakers while disabling operator visibility and response capabilities. It includes an interconnected network of substations, transmission lines, control systems, and intelligent devices that work together to keep electricity flowing reliably. The power grid has become one of the most complex systems and infrastructures ever designed.
PNNL Launches Enhanced Grid Visibility and Event Response Effort to Tackle Energy Security Challenges
Along with all the responsibilities that come with navigating the organization toward increased success and reduced risk, how leaders interact with others sets the tone for the rest of the company. With these events on the rise, it’s time to reassess the resilience of your organization’s infrastructure. With visibility and the ability to detect cyberattacks, the power utility gained confidence in its security posture at the edge and throughout the network. The IT security organization was able to identify those devices and where they were connected, and quickly address the security vulnerabilities that were creating a risk exposure. A CVD is an architectural blueprint for a specific use case designed and tested by Cisco engineers with Cisco equipment. The sensors are embedded into industrial switches, making it easy to deploy at scale throughout the production, transmission, and distribution networks, enabling the power company to obtain visibility into all the traffic.
Our goals include:
Solutions developed here are shared across the energy sector, helping build a more reliable, affordable, secure, and resilient grid for the future. Developed with input from utilities, vendors, and researchers, the EIOC brings together live grid data feeds, advanced analytics, and industry-grade software in a flexible space where new tools can be tested and refined. Supported by DOE’s Office of Electricity, the EIOC offers a secure and collaborative environment for tackling the nation’s most pressing energy challenges—ensuring the nations https://openscience.us/repo/software-maintenance/gnu.html critical electrical infrastructure is reliable, secure, and affordable. By quickly identifying trends and relationships that may reveal a potential threat, grid operators and automated protection systems can rapidly take action to protect the grid. Other examples include data resilience tools like blockchain and adaptive control systems, which adjust in real time based on system conditions.
For example, phishing experiments are valuable to raise employees’ awareness for spear-phishing at companies in the electrical power domain . Moreover, as traffic in PCNs is well defined, a network-based IDS can detect further suspicious network activity, e.g., an increase in the number of packets sent from a network node or communication between network nodes that have not communicated beforehand. Most of the communication in a PCN in the energy sector is conducted between the control room and substations or field devices. In the following, we discuss the different approaches for IDS and their application to the energy sector.
Given the number of organizations present, GridEx estimates that more than 28,000 individual players participated, including utility workers and government partners, an all-time high since the exercise began. Called GridEx, the exercise was hosted by the Electricity Information Sharing and Analysis Center (E-ISAC) from 18 to 20 November 2025, and was described in a report released on 2 March. Aspects include emergency exercises, such as NERC’s biannual GridEx program. The Electricity Subsector Coordinating Council (ESCC) is the liaison between the electric power industry and the federal government, and it is responsible for preparing for and responding to threats and disasters.