Instead, he wants utilities to take what they learn from the training and apply it in their own operations. An AI model processes the results and can classify events based on patterns in the optical signal as a result of perturbations happening around the fiber cable. As the pulses travel down the cables, a tiny fraction of the light is reflected back to the substation unit. If the robot has done the inspection of the substation 100 times, it can then relay to you that there’s an anomaly,” Willis says. One approach involves https://californiarent24.com/blog/page/20 integrating AI analysis into robotic technology already surveilling substation perimeters.
- Such an attack would likely be local in scope with a medium impact, as attackers could only execute previously determined attacks.
- Still, there are tens of thousands of diverse facilities throughout the U.S. and Canada that cannot be protected 100 percent of the time from all threats, requiring utilities to prioritize facilities and assets that, if damaged, would have the most severe impacts on their ability to keep the power on.
- Such an attack could have a large influence on grid operations but does not scale well, as it necessitates physical presence at (possibly multiple) substations.
- The energy grid is a complex, interconnected network of generation, transmission, distribution, control, and communication technologies, which can be damaged by natural events—such as severe storms—and by malicious events, such as cyber and physical attacks.
- The electrical grid has become a primary target for nation-state cyber operations.
That’s up from 2,800 events cited in the 2023 report (3 percent of those also resulted in electricity disruptions). NERC’s 2025 E-ISAC end-of-year report cites more than 3,500 physical security breaches that calendar year, about 3 percent of which disrupted electricity. The U.S. and Canadian grids face growing security issues from physical threats, including vandalism, assault of utility workers, intrusion of property, and theft of components, like copper wiring. Given the number of organizations present, GridEx estimates that more than 28,000 individual players participated, including utility workers and government partners, an all-time high https://canada-welcome.com/hairdressing-software-what-to-choose-and-why.html since the exercise began.
This research helps us to make scientifically informed investment decisions for mitigation measures and to identify ways to leverage existing response and recovery programs and capabilities. The energy grid’s complex, interconnected technologies may be impacted by bursts of electromagnetic energy, such as naturally occurring geomagnetic disturbances (GMDs) or malicious, man-made electromagnetic pulses (EMPs). Protecting the nation’s energy grid and ensuring a reliable and affordable supply of energy are top priorities for America’s electric companies.
Electricity Grid Cybersecurity: DOE Needs to Ensure Its Plans Fully Address Risks to Distribution Systems
” says Erika Willis, the program manager for the substations team at the Electric Power Research Institute (EPRI). While not all data is publicly available, Coe says there’s been a “tenfold” increase over the past decade in the number of reported physical attacks on the grid. A shooting attack on two substations in Moore County, N.C., caused a five-day power outage for more than 40,000 people in December 2022. The industry is expanding equipment sharing programs—like the Spare Transformer Equipment Program, SpareConnect, and Grid Assurance—to improve grid resiliency. Finally, electric utilities regularly share transformers and other equipment through long-existing bilateral and multilateral sharing arrangements and agreements. As such, the electric power industry employs threat mitigation known as “defense-in-depth” that focuses on preparation, prevention, response, and recovery to “all hazard” threats to electric grid operations.
The three primary segments of the electric utility industry—public power, investor-owned, and electric cooperatives—have long had in place mutual aid response networks to share employees and resources to restore power after natural disasters and other emergencies. The exercise will take place this fall in coordination with the Tennessee Valley Authority and a U.S. military facility. The Safe Haven exercise was held in Washington and Kansas, locations that were selected in coordination with DOE based on several criteria. Building off the success of GridEx, APPA hosted its first ever cyber mutual aid exercise, Safe Haven, in fall 2025, funded by DOE. In early 2026, APPA was awarded another $2 million to launch a new program, Response Beacon, to enhance the cyber incident response capabilities of its members.
EMP and Extreme Grid-Down Scenarios
Find out more about our work on electricity grid cybersecurity by checking out our recent reports linked above. After identifying this vulnerability, we recommended the Department of Energy (DOE)—in coordination with the Department of Homeland Security, state, and industry partners—address risks to the distribution systems. Addressing this vulnerability is so important that we made it a priority recommendation for DOE to address. For example, the strategy does not include a complete assessment of all the cybersecurity risks to the grid. As the lead federal agency for the energy sector, DOE has developed plans to implement a national cybersecurity strategy for protecting the grid. Nations and criminal groups pose the most significant cyber threats to U.S. critical infrastructure, according to the Director of National Intelligence’s 2022 Annual Threat Assessment.