A new tool is in the works to help utilities assess the cybersecurity risks associated with grid investments. The National Renewable Energy Laboratory is developing the Cyber100 Compass tool to model risks to energy system upgrades, aiming to provide utility planners with data-informed insights into cybersecurity implications.
Seeking feedback from utilities to support the tool’s development, NREL’s senior cybersecurity researcher Maurice Martin highlighted the current uncertainty surrounding the energy transition’s cybersecurity risks. With the shift towards a more distributed energy system, potential entry points for cyber attackers are on the rise.
Recent warnings from the FBI about increased cyber risks in the renewable energy sector further emphasize the importance of addressing cybersecurity vulnerabilities in the industry. Research by Morningstar Sustainalytics revealed that nearly 38% of utility companies globally had weak cybersecurity management programs in 2022, with incidents compromising customer data and leading to service disruptions.
Quantifying cybersecurity risks for future energy systems is becoming increasingly crucial, and the Cyber100 Compass tool offers a unique approach to assessing and quantifying the impacts of cyberattacks on power systems with high renewables deployment. By aggregating data inputs from experts in power systems, cybersecurity, and risk management, the tool can help utilities visualize their risk tolerance and make informed decisions about system development plans.