NARUC Issues New Cybersecurity Baselines for Electric Distribution Systems and DER

On February 22, 2024, the National Association of Regulatory Utility Commissioners (NARUC), jointly with the U. S. Department of Energy Office of Cybersecurity, Energy Security, and Emergency Response, issued cybersecurity baselines for electric distribution systems and distributed energy resources (DER).

NARUC’s Press Release states in part:

These cybersecurity baselines, coupled with forthcoming implementation guidance, are intended to be resources for state public utility commissions, utilities and DER operators and aggregators. These resources encourage alignment across states who choose to adopt the cybersecurity baselines to help mitigate cybersecurity risk and enhance grid security. NARUC convened a steering group of regulatory, cyber and industry experts from across the sector to help ensure that a wide range of perspectives were considered during the development phase.

***

NARUC and DOE will now kick off Phase 2 of the cybersecurity baselines initiative: Developing implementation strategies and adoption guidelines. This resource will include recommendations for prioritizing the assets to which the cybersecurity baselines might apply, as well as prioritizing the order in which the baselines might be implemented based on cyber risk assessments.

Phase 2 guidance is expected by the end of 2024.

See NARUC Press Release here: https://pubs.naruc.org/pub/3D96F2C5-0E07-7563-6A7C-1CFB39FD015B