FERC Reports Cybersecurity Gaps in U.S. Power Sector Amid AI Risks

• •FERC identified cybersecurity compliance gaps in the U.S. electricity sector.
• •Delays in resource registration and AI-related access risks were significant concerns.
• •Voluntary recommendations for improving cybersecurity compliance were issued.

The Federal Energy Regulatory Commission (FERC) has identified significant cybersecurity compliance gaps within the U.S. electricity sector. An audit revealed that while most cybersecurity processes met mandatory standards, issues such as delays in registering new generation resources and access control risks related to artificial intelligence tools were noted. FERC's report highlighted that some generator owners failed to register new resources with the North American Electric Reliability Corporation (NERC) in a timely manner, potentially affecting the bulk-power system's reliability. Additionally, the report pointed out that some entities did not adequately account for third-party systems, which could leave them vulnerable to cyber threats. The findings emphasize the need for improved cybersecurity practices and voluntary recommendations for registered entities to enhance compliance with Critical Infrastructure Protection (CIP) standards.