Cybersecurity 2020: A System Operator Training Perspective

Our electric system is undergoing a dramatic transformation resulting in countless challenges in planning, operations, and maintenance. The complexity and challenges of operating the grid continues to test our systems as well as the performance of our system operators.

Among the many changes, roles, and responsibilities our system operators must deal with to reliably operate an efficient and increasingly complicated distribution system, cybersecurity concerns have worked their way to the top of the list.

The recent cyber attacks on the Ukraine electric system add to the ever-growing list of cybersecurity concerns of system operations and the technology currently being applied to these systems. These attacks demonstrate the vulnerability of our essential public systems, including power and water utilities, transportation systems, and communications networks. Power grids are an obvious target for bad actors who want to negatively impact many people, especially in a world grown dependent on a vast array of electronic gadgets. 

An estimated 55,000 power plant, transmission, and distribution system operators are employed in North America. This number includes approximately 6,700 NERC-certified system operators holding jobs as Reliability Coordinators, Balancing Authorities, and Transmission Operators. Research estimates one-third (1/3) to one-half (1/2) of these system operators could retire over the next five (5) years, leaving an unprecedented number of vacancies to be filled.

We must consider how to best train incoming system operators to be successful at recognizing and responding to potential cyber attacks as they monitor the operations in control rooms 365 days a year, 24 hours a day. This training requires collaboration from various companies and organizations to incorporate new technologies that specialize in the interface between real-time operations and our system operators. New training technologies are available for intensive, immersion training using a platform which more accurately represents the rapidly changing power grid. This state-of-the-art training results in better preparation for system operators for recognizing and responding to emergency events such as cyber attacks.

We have observed, from working across many entities, operators know what to do when their system is failing. Cyber operators and support personnel including IT professionals know what to do when the technology is failing. However, very few know what to do when their system is operational and being misused against them. Generation, transmission, and distribution system operators need focused cybersecurity training. Our operators are aware of the cyber events in the Ukraine and operators at all levels desire and hunger for specific cyber training.

It’s time for the industry to consider a path for system operators similar to NERC system operator certification and credentialing. This path includes supporting the necessary tools, technology, and specialized training directly relied upon by the system operators for real-time job tasks.  System operator credentialing and continuing education is essential and should be included in system operator training plans as we go forward.

Even though the laws of physics remain the same, training the system operators of tomorrow looks very different from training the system operators of today. Leveraging cybersecurity technology with simulation training is the solution to many of the challenges our system operators will certainly face in the future.