The North American Electric Reliability Corporation (NERC) is getting into the holiday spirit with a focus on extreme weather and cybersecurity vulnerabilities. How festive!
During its December meeting, NERC’s Board of Trustees took actions to address extreme weather impacts on the grid, ensure adequate energy supply, and enhance cybersecurity protections through the approval of new and modified standards.
“We are at a critical stage on the cold weather project with the ballot closing on December 20,” said NERC Board Chair Ken DeFontes. “The Board must decide whether more aggressive action will be necessary. We are watching the ballot closely, and, if it does not pass, will call a special meeting between the Regulatory Oversight Committee and the Board in early January.”
The Board approved the 2025-2027 Reliability Standards Development Plan, which outlines time frames and resources for upcoming projects. Additionally, three standards modifications focused on critical infrastructure protection and energy assurance were adopted, along with two new standards targeting extreme weather and energy assurance.
One project aims to enhance cybersecurity by adding controls to authenticate remote users and detect malicious communications. Another project focuses on preparing for extreme temperature events to ensure the reliability of the transmission system.
In response to a FERC directive, NERC was authorized to issue a cold weather data request to collect and analyze generator data for cold weather preparedness efforts.
Cyberattacks on critical infrastructure are on the rise, prompting NERC to release recommendations for combating power grid cyber attacks. While progress has been made in addressing vulnerabilities, concerns remain about persistent security issues within entities’ environments.
To strengthen CIP performance, NERC recommends revisiting detective controls and dedicating resources to testing and vulnerability assessments.
Earlier this year, FBI Director Christopher Wray warned of Chinese government hackers targeting critical infrastructure in the United States. Despite these challenges, NERC continues to prioritize cybersecurity and grid reliability.
(Source: Power-Grid.com)