Report on US electric grid physical security

Since a 2013 rifle attack on a critical electric power substation in California, the U.S. electric power sector has generally moved toward greater physical security for critical assets, according to a report published by the Congressional Research Service. But the report says bulk power security "remains a work in progress," and suggests further investment -- and policy reforms -- may follow.

The report published on March 19, 2018 -- NERC Standards for Bulk Power Physical Security: Is the Grid More Secure? -- begins with the premise that securing the electric power grid is among the nation's highest priorities for critical infrastructure protection. It notes that a 2013 rifle attack on an electric transmission substation in California which caused widespread power outages also broadened policy attention from cybersecurity to encompass the physical security of assets critical to the power grid.

In response, Congress enacted legislation to strengthen power grid physical security and to facilitate its recovery from disruption. Section 1104 of the Fixing America’s Surface Transportation (FAST) Act contains provisions to protect or restore the reliability of critical electric infrastructure or defense of critical electric infrastructure during a grid security emergency. The Federal Energy Regulatory Commission (FERC) and the nation's electric reliability organization NERC also took action to develop new reliability standards for the physical security of bulk power critical infrastructure.

But physical security risks may persist. The report references a September 2016 rifle attack on a Garkane Energy Cooperative transformer substation in Utah as illustrating this persistence. The report notes that while it is probably accurate to conclude that the grid is more physically secure than it was in 2013, "it has not necessarily reached the level of physical security needed based on the sector's own assessments of risk.

The report notes Congress's continued concern about the physical security of the electric grid. It identifies possible areas for further policy focus as including "security implementation oversight, cost recovery, hardening vs. resilience, and the quality of threat information."

Meanwhile, cybersecurity has remained a priority. An October 2017 FERC report describing the results of its audits of regulated companies' cybersecurity protection processes and procedures noted that most met the applicable mandatory standards. But earlier this month, NERC fined an anonymous utility $2.7 million for alleged violations of reliability standards in connection with a data security breach, and the U.S. Department of Homeland Security issued warnings about Russian hackers targeting computer systems controlling energy and other critical infrastructure.

Interest in shoring up the security of energy infrastructure and systems -- both from physical attacks as well as cyber threats -- appears poised to drive continued discussions, regulation, and investment.

FERC considers geomagnetic disturbance standards

U.S. energy regulators examining reliability standards for the electric transmission grid relating to geomagnetic disturbances have scheduled a technical conference for March 1, 2016.

Geomagnetic disturbance, or GMD, events occur during solar storms when the sun emits charged particles whose magnetic field interacts with that of the Earth.  GMDs can affect transformers, transmission lines, and other electric grid infrastructure.  As the Federal Energy Regulatory Commission noted in its Order No. 779, "there is a general consensus that GMD events can cause wide-spread blackouts due to voltage instability and subsequent voltage collapse, thus disrupting the reliable operation of the Bulk-Power System."

In 2013, the FERC issued Order No. 779 directing NERC to propose Reliability Standards that address the impact of geomagnetic disturbances (GMD) on the reliable operation of the Bulk - Power System.  In 2015, NERC made its proposal, which the FERC has proposed to largely accept.

But the case before FERC, docketed as RM15-11, remains ongoing.  Grid operators, utilities, trade groups, and others have filed comments or otherwise participated in the case.

The Commission has now scheduled a GMD technical conference on March 1, 2016, as a forum for "a structured dialogue on GMD-related topics."  Items specifically identified for discussion at this stage include what kind of GMD event should be used as the "benchmark" for planning purposes, vulnerability assessments, and monitoring of related parameters.