Department of Homeland Security

Policy makers in the E.U. and the United States are taking different approaches to facilitating smart grid development. While both regions are setting standards that the rest of the world likely will follow, they also face difficult challenges in resolving issues around cost recovery, customer engagement and workforce preparedness.

Given this dynamic state of evolution, it’s not surprising that next-generation technologies are undergoing their own difficult transitions. This transition is exemplified by four high-tech projects being executed by four electric utilities: Duke Energy, American Electric Power, Consolidated Edison and San Diego Gas & Electric. Their projects address different parts of the power-supply chain, and they’re taking different paths to secure financing and regulatory acceptance.

Who will oversee the industry’s cyber standards? Effective security calls for a single organization to set standards that will protect the smart grid. The industry is struggling to reach consensus over authority, scope and funding for its new security apparatus.

The new administration might be our last, best hope for recapturing America’s technological and economic superiority. The time has come to institute an “Apollo Project” level of effort to convert to a carbon-free energy infrastructure while tossing aside the business-as-usual model. The future lies in nuclear power.

A simulated attack, named the Aurora Generator Test, took place in March 2007 by researchers investigating supervisory control and data acquisition (SCADA) system vulnerabilities at utility companies. The experiment involved hackers invading the plant’s control system to change the operating cycle of the generator.

The NERC CIP standards represent an historic achievement. They include the first mandatory cyber security requirements of their kind to be imposed on a U.S. private-sector industry. Considering the scope and sensitivity of the grid-security issue, developing a set of enforceable standards inevitably would entail a complex and contentious process. From that perspective, NERC, FERC and the industry have made remarkable progress, and their efforts deserve accolades.

Ever-present security concerns are keeping utility chief information officers up at night. With their IT budgets under constraints in a back-to-basics era, four CIOs speak out about their concerns over funding, staffing, and the future.

In our annual technology forum, we talk with tech/information specialists at four companies: Patricia Lawicki at PG&E; Ken Fell at the New York ISO; Mark C. Williamson at American Transmission Co.; and John Seral at GE Energy.

As the balloting process for new cyber-security standards from the North American Electric Reliability Council (NERC) drew to a close, the industry group was gearing up for the difficult tasks ahead: ensuring rapid implementation of the new standards among NERC's members.