Cybersecurity, Reliability & CIP

“The opportunity now is to make Wildfire Mitigation Plans more understandable, comparable, and evaluator-friendly, much as integrated resource and transmission plans became over time.”

“We’ve been told by customers they’re getting asked about Gridscope deployments on bond ratings and insurance calls – we’re hoping that in addition to direct reliability and risk reduction benefits we can provide, we’re also able to make a dent on affordability.”

“For utility leaders, cyber risk is increasingly intertwined with how we operate, manage, and restore the grid. This evolution has implications for how utilities should think about preparedness, resilience, and leadership.”

“New substations, transmission lines, and distribution infrastructure represent enormous capital commitments. If assets are sited without rigorous flood risk assessment, utilities are not just exposing existing infrastructure to harm; they are locking in new exposure for decades.”

“Historically, Section 202(c) was used sparingly. More recently it has emerged as an active tool to address reliability as large load growth, infrastructure constraints, and weather volatility have placed sustained pressure on regional systems.”

“The electric sector’s cybersecurity posture is undergoing a fundamental shift. This evolution recognizes that organizations must plan for scenarios where adversaries are already operating within the environment.”

“One of the most underappreciated risks is the condition of aging thermal infrastructure. Without proactive life management, the utility sector risks unexpected failures. For regulators, this raises questions about how asset integrity is assessed and how lifecycle risk is factored into planning and rate cases.”

“Today, compliance and risk management resemble a constant turning puzzle, much like Rubik’s Cube. With every move, the alignment of risk and compliance across the organization is reshaped.”

“For many in the electric sector, the term baseline immediately evokes CIP-010-4 Requirement R1, a well-established standard for configuration management. But CIP-015-1 introduces a fundamentally different concept: behavioral baselining. Understanding this distinction is critical for compliance and cybersecurity effectiveness.”

“The intent is that all of you would have a resource to turn to when you’re evaluating utility risk management, cost recovery, financial mechanisms, and how to balance safety, reliability, and affordability when you’re considering utility investments to address wildfire.”