Tips for Protecting Against Power System Attacks

Image courtesy of Sam LaRussa under Attribution 2.0 Generic License, resized to 700 x 391 pixels.

Unless you’ve been living under a rock, you are no doubt aware of the increased number of power system attacks that have been occurring recently.  For example, in November 2022, 6 substations in the Pacific Northwest were attacked, and a 12/4/22 Duke substation attack occurred in North Carolina, causing 45,000 outages.  The question for utilities is, what can be done to stem the tide on this?

How to Prepare for, and Reduce, Power System Attacks

According to this recent Utility Dive article, utility companies have several courses of action that should be implemented to help address this threat:

• Develop an internal risk-intelligence function. Utilities would be wise to enlist the services of at least one full time employee to provide intelligence on external threats and opportunities so they can be addressed proactively.
• Randomize security measures. The key is to execute visible security measures, like extra security patrol, law enforcement presence, security cameras, etc., at random intervals to basically catch bad actors’ off-guard and disrupt their plans.
• Improve systems and protocols to enable the 2-way sharing of information between utilities and law enforcement. The more data that can be collected, the deeper the analytical possibilities and the greater the ability to be prepared for the worst.
• Revisit emergency plans and training exercises. It is important to ensure that the full scope of the ‘new norm’ of power system attacks is fully accounted for in the emergency preparedness function.  Ensure plans are up to date, and incorporate power system attacks into exercises and drills.
• Solicit support from residents and customers. This might include, for example, launching a communication campaign to ask people to report suspicious activity.

The bottom line is that utility companies operate in an increasingly treacherous environment, and the increasing number of power system attacks experienced in the U.S. and elsewhere is just one troubling symptom of this new reality.  And while we cannot predict how and when these attacks may occur, we can at least be prepared for when they inevitably do.