Cybersecurity, Reliability & CIP

On April 30, FERC held a technical conference to review scientific claims and policy arguments about geomagnetic disturbances, known as GMD—how some say that a once-in-a-century solar storm could induce a power surge on the interstate grid so destructive as to cook and fry as many 300 extra-high-voltage transformers, plunging much of the nation into a blackout lasting months or even years. Some researchers even harbor fears that GMDs could end life as we know it.

Amid focused attention on cybersecurity for T&D networks and power plants, one critical system is often overlooked: land-based radios. During an emergency, field crews rely on their ability to communicate with radios, making these systems highly vulnerable targets for malicious attackers. Securing them requires robust technologies and tools, as well as training and practices to ensure their availability when the grid goes down.

The hype over smart grid has become focused on the idea of “advanced distribution management systems” (ADMS). But so far, few utilities have implemented ADMS beyond pilots and incremental tests. Fortnightly analyzes the technology trends and profiles examples of true ADMS in action.

NERC’s critical infrastructure protection (CIP) standards set a minimum level of security performance—and only for high-voltage transmission systems, not the distribution grid. A compliance-checklist approach to security might lack the adaptability needed to combat evolving threats like the Stuxnet worm. A multi-layered, risk-based approach will provide better protection for the emerging smart grid.

Smart grid technologies bring a host of cyber security considerations that need to be addressed throughout the transmission and distribution domain—and even into the customer’s home. In the second of two exclusive articles, Department of Energy authors team up with industry experts to provide a path forward for securing the smart grid.

In the wake of recent global-scale cyber intrusions, security concerns have expanded from being compliance and operational issues to fundamental risk management considerations. An integrated, enterprise-wide approach holds the greatest promise for securing critical utility infrastructure against increasing dangers in cyberspace.

Smart grid technologies bring a host of cyber security considerations that need to be addressed throughout the T&D domain—and even into the customer’s home. In this exclusive report, Department of Energy authors team up with industry experts to examine how to deal with the changes and challenges of securing the smart grid.

Four years ago, Congress made its wishes known: it tabbed the National Institute of Standards and Technology to develop a set of standards for the smart grid, and then instructed FERC, the Federal Energy Regulatory Commission “adopt” those standards, but only after finding a ”sufficient consensus,” and only “as may be necessary” to assure “functionality and interoperability.” Yet what is known is not necessarily clear. Who decides if consensus prevails? What does “interoperability” mean? Should FERC’s “necessary” finding extend to retail smart grid applications, arguably outside its purview? And the biggest dispute — must standards be mandatory? — finds PJM at odds with much of the utility industry.

While it’s theoretically possible to keep the lights on with a much smaller reserve than the U.S. utility industry historically has maintained, the costs of doing so might be higher than some analyses suggest. As demand response plays a growing role on the grid—and as system planners reconsider reserve margins and reliability standards—quantitative risk analysis will guide resource adequacy decisions.

Smart grid is a global phenomenon, but different countries are taking different approaches—for different reasons. For instance, utilities in Europe are more focused on laying the foundation for distributed generation and microgrids, while the United States is more concerned about creating standards for interoperability and security. Understanding the differences can help decision makers deploy smart grid technology effectively and economically.