Cybersecurity Initiatives for Power and Energy Sector Resilience

The U.S. Department of Energy has emphasized the importance of cybersecurity in the power and energy sector, particularly as cyberattacks targeting critical infrastructure have surged. In 2025, over 2,100 ransomware incidents were reported, with a significant focus on the energy sector. The National Association of Regulatory Utility Commissioners, in collaboration with the DOE, has developed cybersecurity baselines for electric distribution systems and distributed energy resources. These guidelines aim to enhance resilience by prioritizing asset protection and establishing a foundational cybersecurity framework. The interim guidance includes strategies for asset scoping and baseline prioritization, helping organizations focus on critical assets. The initiative is part of a broader effort to mitigate cybersecurity risks across the energy infrastructure. The final guidance is expected to be released in mid-2025, replacing the interim draft.

Key Points: • Cyberattacks on the power sector increased, with over 2,100 ransomware incidents in 2025. • The DOE and regulatory bodies are developing cybersecurity baselines for electric distribution systems. • Recovery readiness is essential for power organizations to ensure quick restoration of services.