Electric grid group sees potential conflicts over intersection of upcoming CISA regulation with sector-specific requirements

Existing cyber incident reporting requirements under the North American Electric Reliability Corporation and the Department of Energy should be evaluated for harmonization as CISA embarks on developing its own mandatory regulation for critical infrastructure, according to the Edison Electric Institute.

One of NERC’s Critical Infrastructure Protection Reliability Standards sets up requirements for incident reporting and response planning, and DOE requires reporting on grid incidents and emergencies through its Electric Emergency Incident and Disturbance Report, known as “Form DOE-417.”

“Due to...