[BETA] Fortnightly

State commissions can select from a toolkit of regulatory approaches to promote desired utility cybersecurity behavior. One approach is to allow the industry to selfregulate, and another approach is to leave the job to the federal government. But sofar, neither the industry nor the federal government have developed and implemented adequate standards for securing the smart grid. States can play a constructive role—albeit perhaps not in the form of traditional regulation.

On April 30, FERC held a technical conference to review scientific claims and policy arguments about geomagnetic disturbances, known as GMD—how some say that a once-in-a-century solar storm could induce a power surge on the interstate grid so destructive as to cook and fry as many 300 extra-high-voltage transformers, plunging much of the nation into a blackout lasting months or even years. Some researchers even harbor fears that GMDs could end life as we know it.

The advent of smart grid technology has raised new and challenging issues concerning data privacy. Of course, data privacy isn’t a new concern for the energy industry, as utilities have always collected customer data, some of which is common to any business, such as contact and credit information, and some of which is unique to the energy industry, such as usage and demand data.

A pair of myths is driving many investments today—i.e., America’s T&D system is falling apart, but the smart grid will save the day. A new MIT study reveals a more nuanced truth about reliability, efficiency, and plans for new technologies. The most effective policies and investments will focus on solving real problems and delivering tangible benefits.

Smart grid technologies bring a host of cyber security considerations that need to be addressed throughout the T&D domain—and even into the customer’s home. In this exclusive report, Department of Energy authors team up with industry experts to examine how to deal with the changes and challenges of securing the smart grid.

Given this dynamic state of evolution, it’s not surprising that next-generation technologies are undergoing their own difficult transitions. This transition is exemplified by four high-tech projects being executed by four electric utilities: Duke Energy, American Electric Power, Consolidated Edison and San Diego Gas & Electric. Their projects address different parts of the power-supply chain, and they’re taking different paths to secure financing and regulatory acceptance.

Who will oversee the industry’s cyber standards? Effective security calls for a single organization to set standards that will protect the smart grid. The industry is struggling to reach consensus over authority, scope and funding for its new security apparatus.

The new administration might be our last, best hope for recapturing America’s technological and economic superiority. The time has come to institute an “Apollo Project” level of effort to convert to a carbon-free energy infrastructure while tossing aside the business-as-usual model. The future lies in nuclear power.

A simulated attack, named the Aurora Generator Test, took place in March 2007 by researchers investigating supervisory control and data acquisition (SCADA) system vulnerabilities at utility companies. The experiment involved hackers invading the plant’s control system to change the operating cycle of the generator.

Ever-present security concerns are keeping utility chief information officers up at night. With their IT budgets under constraints in a back-to-basics era, four CIOs speak out about their concerns over funding, staffing, and the future.