Part of Grid Network »

The Grid Professionals Group covers electric current from its transmission step down to each customer's home. 


You need to be a member of Energy Central to access some features and content. Please or register to continue.


FERC is seeking comments to improve cybersecurity protections for the Electric Grid

image credit: Federal Energy Regulatory Commission

On 6/18/2020 the Federal Energy Regulatory Commission (FERC) published a white paper requesting comments on possible voluntary cybersecurity enhancements to augment NERC CIP standards by applying the NIST Cybersecurity Framework (NIST CSF) for cyber controls that would bolster protections for the grid, over and above the NERC standards. The proposal suggest that parties that implement these expanded NIST CSF controls may be eligible for an incentive of 200 basis points for their efforts and investments. On 6/30/2020 Reliable Energy Analytics, LLC filed comments with FERC supporting the proposal contained in the white paper. 

Richard Brooks's picture

Thank Richard for the Post!

Energy Central contributors share their experience and insights for the benefit of other Members (like you). Please show them your appreciation by leaving a comment, 'liking' this post, or following this Member.


Matt Chester's picture
Matt Chester on Jun 30, 2020 9:09 pm GMT

What's your take on the effectiveness of voluntary enhancements vs. making the mandatory minimum stronger, Richard?

Richard Brooks's picture
Richard Brooks on Jun 30, 2020 10:08 pm GMT

Matt, I think FERC says it best in their white paper with regards to NERC CIP standards: "Standards do not necessarily require entities to employ best practices. Moreover, the standards development process does not lend itself to addressing rapidly evolving cybersecurity threats. It can take many months for a new standard to be developed, and once approved, it may be several more months or years before fully implemented and enforceable".

Matt Chester's picture
Matt Chester on Jul 1, 2020 11:54 am GMT

That's a great point, thanks for sharing that. I suppose when those voluntary standards exist, then by sheer force of peer pressure where competitors are then all in alignment it would make other entities that choose to cut corners stick out like a sore thumb

Richard Brooks's picture
Richard Brooks on Jul 1, 2020 12:42 pm GMT

I like FERC's idea to pay an interest rate of 2% on any investment in cybersecurity controls for grid operations. I think some people will find this incentive attractive. My FERC filing on docket AD20-19-000 contains a prototype demonstration of a project that may be worthy of FERC approval as a voluntary standard that is eligible to receive the 2%.

Get Published - Build a Following

The Energy Central Power Industry Network is based on one core idea - power industry professionals helping each other and advancing the industry by sharing and learning from each other.

If you have an experience or insight to share or have learned something from a conference or seminar, your peers and colleagues on Energy Central want to hear about it. It's also easy to share a link to an article you've liked or an industry resource that you think would be helpful.

                 Learn more about posting on Energy Central »