Since a 2013 rifle attack on a critical electric power substation in California, the U.S. electric power sector has generally moved toward greater physical security for critical assets, according to a report published by the Congressional Research Service. But the report says bulk power security "remains a work in progress," and suggests further investment -- and policy reforms -- may follow.
The report published on March 19, 2018 -- NERC Standards for Bulk Power Physical Security: Is the Grid More Secure? -- begins with the premise that securing the electric power grid is among the nation's highest priorities for critical infrastructure protection. It notes that a 2013 rifle attack on an electric transmission substation in California which caused widespread power outages also broadened policy attention from cybersecurity to
encompass the
physical security
of assets critical to the power grid.
In response, Congress enacted legislation to strengthen power grid physical security and to facilitate its recovery from disruption. Section 1104 of the Fixing America’s Surface Transportation (FAST) Act contains provisions to protect or restore the reliability of critical electric infrastructure or defense of critical electric infrastructure during a grid security emergency. The Federal Energy Regulatory Commission (FERC) and the nation's electric reliability organization NERC also took action to develop new reliability standards for the physical security of bulk power critical infrastructure.
But physical security risks may persist. The report references a September 2016 rifle attack on a Garkane Energy Cooperative transformer substation in Utah as illustrating this persistence. The report notes that while it is probably accurate to conclude that the grid is more physically secure than it was in 2013, "it has not necessarily reached the level of physical security needed based on the sector's own assessments of risk.
The report notes Congress's continued concern about the physical security of the electric grid. It identifies possible areas for further policy focus as including "security implementation oversight, cost recovery, hardening vs. resilience, and the
quality of threat information."
Meanwhile, cybersecurity has remained a priority. An October 2017 FERC report describing the results of its audits of regulated companies' cybersecurity protection processes and procedures noted that most met the applicable mandatory standards. But earlier this month, NERC fined an anonymous utility $2.7 million for alleged violations of reliability standards in connection with a data security breach, and the U.S. Department of Homeland Security issued warnings about Russian hackers targeting computer systems controlling energy and other critical infrastructure.
Interest in shoring up the security of energy infrastructure and systems -- both from physical attacks as well as cyber threats -- appears poised to drive continued discussions, regulation, and investment.
Energy powers society; society's choices shape energy policy. A blog about our energy resources and the choices they present for society.
Showing posts with label attack. Show all posts
Showing posts with label attack. Show all posts
US intelligence threat assessment on cyber, energy, infrastructure risks
Friday, February 16, 2018
The U.S. intelligence community has released an unclassified report presenting its assessment of the global context and how threats could affect U.S. actions. The latest Worldwide Threat Assessment finds increasing risk of cyber attacks and threats to U.S. infrastructure, as well as impacts from climate change.
The 28-page report released February 13, 2018, Statement for the Record: Worldwide Threat Assessment of the US Intelligence Community, describes a variety of global and regional threats.
While a disclaimer notes that the order of topics addressed does not necessarily imply the relative importance or magnitude of threats covered in the report, the first category of global threat addressed is cyber threats. According to the assessment, "The potential for surprise in the cyber realm will increase in the next year and beyond as billions more digital devices are connected — with relatively little built-in security — and both nation states and malign actors become more emboldened and better equipped in the use of increasingly widespread cyber toolkits. The risk is growing that some adversaries will conduct cyber attacks — such as data deletion or localized and temporary disruptions of critical infrastructure — against the United States in a crisis short of war. "
Illustrating this threat, the report notes that state-sponsored cyber attacks against Ukraine and Saudi Arabia in 2016 and 2017 targeted multiple sectors across critical infrastructure, government, and commercial networks, including disruption of Ukrainian energy-distribution networks. The report projects that in the next year, "Russian intelligence and security services will continue to probe US and allied critical infrastructures."
The report also notes the complex global foreign intelligence threat environment facing the U.S. in 2018. While it identifies penetrating the US national decisionmaking apparatus and intelligence community as primary objectives for numerous foreign intelligence entities, the report notes that "the targeting of national security information and proprietary information from US companies and research institutions involved with defense, energy, finance, dual-use technology, and other areas will remain a persistent threat to US interests."
The report cites U.S. Energy Information Administration forecasts that 2018 West Texas Intermediate and Brent prices will average $58 and $62 per barrel, respectively, compared to $98 and $109 in 2013. Noting that oil prices have remained low since 2013, the report observes that oil-exporting countries continue to suffer from low prices, and that "their economic woes are likely to continue, with broader negative implications. Subdued economic growth, combined with sharp increases in North American oil and gas production, probably will continue putting downward pressure on global energy prices, harming oil-exporting economies." The report describes impacts of low oil prices on countries including Venezuela, Saudi Arabia and other Persian Gulf oil exporters, Angola, Nigeria, Russia.
The report also notes the existence and impacts of climate change. It observes, "Challenges from urbanization and migration will persist, while the effects of air pollution, inadequate water, and climate change on human health and livelihood will become more noticeable. Domestic policy responses to such issues will become more difficult — especially for democracies — as publics become less trusting of authoritative information sources."
According to the assessment, "The impacts of the long-term trends toward a warming climate, more air pollution, biodiversity loss, and water scarcity are likely to fuel economic and social discontent — and possibly upheaval — through 2018." It notes that the "past 115 years have been the warmest period in the history of modern civilization , and the past few years have been the warmest years on record." It cites extreme weather events in a warmer world as having the potential for greater impacts in the future, as well as increased challenges to government prompted by environmental concerns or water scarcity. The report also notes that nearly half the world's international river basins are exposed to gaps in the agreements governing water supply and dam development, exacerbating this concern.
The 28-page report released February 13, 2018, Statement for the Record: Worldwide Threat Assessment of the US Intelligence Community, describes a variety of global and regional threats.
While a disclaimer notes that the order of topics addressed does not necessarily imply the relative importance or magnitude of threats covered in the report, the first category of global threat addressed is cyber threats. According to the assessment, "The potential for surprise in the cyber realm will increase in the next year and beyond as billions more digital devices are connected — with relatively little built-in security — and both nation states and malign actors become more emboldened and better equipped in the use of increasingly widespread cyber toolkits. The risk is growing that some adversaries will conduct cyber attacks — such as data deletion or localized and temporary disruptions of critical infrastructure — against the United States in a crisis short of war. "
Illustrating this threat, the report notes that state-sponsored cyber attacks against Ukraine and Saudi Arabia in 2016 and 2017 targeted multiple sectors across critical infrastructure, government, and commercial networks, including disruption of Ukrainian energy-distribution networks. The report projects that in the next year, "Russian intelligence and security services will continue to probe US and allied critical infrastructures."
The report also notes the complex global foreign intelligence threat environment facing the U.S. in 2018. While it identifies penetrating the US national decisionmaking apparatus and intelligence community as primary objectives for numerous foreign intelligence entities, the report notes that "the targeting of national security information and proprietary information from US companies and research institutions involved with defense, energy, finance, dual-use technology, and other areas will remain a persistent threat to US interests."
The report cites U.S. Energy Information Administration forecasts that 2018 West Texas Intermediate and Brent prices will average $58 and $62 per barrel, respectively, compared to $98 and $109 in 2013. Noting that oil prices have remained low since 2013, the report observes that oil-exporting countries continue to suffer from low prices, and that "their economic woes are likely to continue, with broader negative implications. Subdued economic growth, combined with sharp increases in North American oil and gas production, probably will continue putting downward pressure on global energy prices, harming oil-exporting economies." The report describes impacts of low oil prices on countries including Venezuela, Saudi Arabia and other Persian Gulf oil exporters, Angola, Nigeria, Russia.
The report also notes the existence and impacts of climate change. It observes, "Challenges from urbanization and migration will persist, while the effects of air pollution, inadequate water, and climate change on human health and livelihood will become more noticeable. Domestic policy responses to such issues will become more difficult — especially for democracies — as publics become less trusting of authoritative information sources."
According to the assessment, "The impacts of the long-term trends toward a warming climate, more air pollution, biodiversity loss, and water scarcity are likely to fuel economic and social discontent — and possibly upheaval — through 2018." It notes that the "past 115 years have been the warmest period in the history of modern civilization , and the past few years have been the warmest years on record." It cites extreme weather events in a warmer world as having the potential for greater impacts in the future, as well as increased challenges to government prompted by environmental concerns or water scarcity. The report also notes that nearly half the world's international river basins are exposed to gaps in the agreements governing water supply and dam development, exacerbating this concern.
Energy dept adopts grid emergency order rule
Wednesday, January 17, 2018
U.S. energy regulators have issued a final rule governing the procedures through which the Secretary of Energy may issue an emergency order under the Federal
Power Act to respond to an electric grid security emergency.
Under the Fixing America's Surface Transportation Act of 2015, Congress authorized the Secretary of Energy to order emergency measures after the President declares a grid security emergency. Such an emergency could occur as the result of a physical attack, a cyber-attack using electronic communication, an electromagnetic pulse (EMP), or a geomagnetic storm event. The FAST Act added these powers to the Federal Power Act, which contained additional language authorizing the Secretary to order temporary emergency measures as needed to serve the public interest.
On January 10, the U.S. Department of Energy published its final rule governing grid security emergency orders. According to the Department, the procedures established by this final rule "will ensure the expeditious issuance of emergency orders under the Federal Power Act." It says the final rule establishes a "consistent yet flexible set of procedures" for regulatory engagement with impacted parties as the Department issues emergency orders. The Department says it "expects that these emergency orders would be issued rarely," but emphasized its need for flexibility in tailoring a response to the particular circumstances of any grid disruption.
The new final rule is codified in 18 C.F.R. section 205.380 et seq.
Under the Fixing America's Surface Transportation Act of 2015, Congress authorized the Secretary of Energy to order emergency measures after the President declares a grid security emergency. Such an emergency could occur as the result of a physical attack, a cyber-attack using electronic communication, an electromagnetic pulse (EMP), or a geomagnetic storm event. The FAST Act added these powers to the Federal Power Act, which contained additional language authorizing the Secretary to order temporary emergency measures as needed to serve the public interest.
On January 10, the U.S. Department of Energy published its final rule governing grid security emergency orders. According to the Department, the procedures established by this final rule "will ensure the expeditious issuance of emergency orders under the Federal Power Act." It says the final rule establishes a "consistent yet flexible set of procedures" for regulatory engagement with impacted parties as the Department issues emergency orders. The Department says it "expects that these emergency orders would be issued rarely," but emphasized its need for flexibility in tailoring a response to the particular circumstances of any grid disruption.
The new final rule is codified in 18 C.F.R. section 205.380 et seq.
Subscribe to:
Posts (Atom)
