FERC finds security shortcomings at electric entities based on bulk power reliability audits

An annual report from the Federal Energy Regulatory Commission calls on entities registered under the North American Electric Reliability Corporation to fully implement cyber requirements from bulk power standards and mitigate operational risks posed by cyber assets.

“The report, 2024 Lessons Learned from Commission-Led Reliability Audits, finds most of the registered entities’ cybersecurity protection measures meet the mandatory requirements of the [Critical Infrastructure Protection] reliability standards. The report identifies potential noncompliance and security risks that remain, and offers recommendations to...