HUSSAIN AL HURAITI & PARTNERS

Securing the U.S. Electricity Grid from Cyberattacks U.S. GAO

power grid security

The threat of potential electrical grid cyberattacks by foreign states such as Russia has also been area of concern for electrical grid security. In a report concerning extremist threats, the Department of Homeland Security made note of a Telegram document that gave instructions for low-tech sabotage, including attacks on electrical power stations with rifles. Since 2014, vandalism and confirmed or suspected physical attacks on electrical grid infrastructure have also been the second-largest cause of electrical disturbance events. One of the key issues for electric grid security is that these ongoing improvements and modernizations have created more risk to the system. The Western Interconnection recorded 220 physical security incidents in 2024, more than double the 107 incidents in 2023, according to DOE OE-417 reporting. The North American Electric Reliability Corporation (NERC) reports that susceptible points on the grid are increasing by approximately 60 per day as the grid expands to incorporate distributed energy resources and smart grid technology.

A Tennessee man was arrested in November 2024 for attempting to attack a Nashville substation using a drone armed with explosives. In December 2025, an engineer in San Jose, Calif., was sentenced to https://northfloridahouse.com/personalized-learning-the-future-of-adaptive-education.html 10 years in prison for bombing electric transformers in 2022 and 2023. Some German officials cite domestic extremism and fears of Russian sabotage in recent years as reasons for heightened security concerns over critical infrastructure. Yet despite a number of recent high-profile attacks in the United States, physical attacks on the grid are happening worldwide.

power grid security

Its federal government counterparts include senior administration officials from the White House, relevant cabinet agencies, federal law enforcement, and https://bestchicago.net/quantum-ai-an-innovative-trading-platform-built-on-advanced-algorithms.html national security organizations. The ESCC is composed of electric company CEOs and trade association leaders from all segments of the industry. Its mission is to coordinate efforts to prepare for, and respond to, national-level disasters or threats to critical infrastructure. In May 2020, he issued an executive order that bans the use of grid equipment manufactured by a foreign adversary.

Supporting a Reliable, Resilient Energy Grid

power grid security

Likewise, hardware performance counters can be utilized to detect modifications in firmware of critical infrastructure components . To this end, different approaches for hardware-based or software-based remote code attestation allow to verify the integrity of code, its execution, and updates. If an attacker has gained full access to the PCN, we can assume that the attacker is able to send arbitrary control commands to connected control systems. In the following, we briefly discuss the three most important methods an attacker with access to the PCN can employ. We assume an attacker accessing a PCN to aim at disrupting the power grid and do not specifically consider pure passive attacks, such as industrial espionage.

Poland Grid Attack – December 2025

  • Cybersecurity is also an issue for electric grid security in the United States with financially motivated crimes being more common than terrorist ones.
  • A Tennessee man was arrested in November 2024 for attempting to attack a Nashville substation using a drone armed with explosives.
  • To facilitate managing cybersecurity supply chain risks, a committee of representatives of EEI member companies developed this model to align cybersecurity requirements and to encourage adoption by the vendor community.
  • The U.S. and Canadian grids face growing security issues from physical threats, including vandalism, assault of utility workers, intrusion of property, and theft of components, like copper wiring.
  • If an attacker has gained full access to the PCN, we can assume that the attacker is able to send arbitrary control commands to connected control systems.
  • Likewise, the increasing use of digital and decentralized technology provides a larger attack surface 18,19,20.

Some utility companies have cybersecurity-specific practices or teams. The goal is to improve sector-wide resilience to both physical and cyber threats. Today the utility industry is advancing cybersecurity with a series of initiatives. “It would be difficult for even a well-organized large group of terrorists to cause the physical damage of a small- to moderate-scale tornado.” This is due to the resiliency of the national grid to such events.

power grid security

Leave a Comment

Your email address will not be published. Required fields are marked *

2

Scroll to Top