The FISMA Focus IPD

By Christopher J. Townsend, Christopher N. Skey, Adam T. Margolin

The North American electric power grid is sometimes described as the largest machine ever built. Given its size and interconnected nature, the grid traditionally has been viewed as particularly vulnerable to physical disruption from weather-related damage, intentional attacks, human error and aging equipment. However, as the grid modernized through increased automation and communication, it became necessary to consider cyber threats alongside those more traditional concerns. The industry responded, both through regulation and by establishing voluntary information-sharing networks.

The energy sector’s method of preparing for cyber threats and promoting appropriate regulation is instructive in planning for the inevitable “cyber regulation” of other industries such as manufacturing, transportation, and communications. This article discusses the “lessons learned” from the energy sector and helps explain how those lessons could apply to other industries.

Cyber Regulations for the Electric Grid