Cybersecurity, Reliability & CIP

This panel at the NARUC Summer Policy Summit examined how utilities, grid operators, regulators, consumer advocates, and the Department of Energy work together to maintain grid reliability during extreme events. The discussion focused on lessons learned from recent winter storms, the role of emergency authorities such as Section 202(c) of the Federal Power Act, and the importance of coordination across regions and fuel types, as well as addressed issues that arise in balancing reliability, affordability, and resilience.

“The opportunity now is to make Wildfire Mitigation Plans more understandable, comparable, and evaluator-friendly, much as integrated resource and transmission plans became over time.”

“We’ve been told by customers they’re getting asked about Gridscope deployments on bond ratings and insurance calls – we’re hoping that in addition to direct reliability and risk reduction benefits we can provide, we’re also able to make a dent on affordability.”

“For utility leaders, cyber risk is increasingly intertwined with how we operate, manage, and restore the grid. This evolution has implications for how utilities should think about preparedness, resilience, and leadership.”

“New substations, transmission lines, and distribution infrastructure represent enormous capital commitments. If assets are sited without rigorous flood risk assessment, utilities are not just exposing existing infrastructure to harm; they are locking in new exposure for decades.”

“Historically, Section 202(c) was used sparingly. More recently it has emerged as an active tool to address reliability as large load growth, infrastructure constraints, and weather volatility have placed sustained pressure on regional systems.”

“The electric sector’s cybersecurity posture is undergoing a fundamental shift. This evolution recognizes that organizations must plan for scenarios where adversaries are already operating within the environment.”

“One of the most underappreciated risks is the condition of aging thermal infrastructure. Without proactive life management, the utility sector risks unexpected failures. For regulators, this raises questions about how asset integrity is assessed and how lifecycle risk is factored into planning and rate cases.”

“Today, compliance and risk management resemble a constant turning puzzle, much like Rubik’s Cube. With every move, the alignment of risk and compliance across the organization is reshaped.”