Cybersecurity, Reliability & CIP

Although today microgrids serve a tiny fraction of the market, that share will grow as costs fall. Utilities can benefit if they plan ahead.

The conventional wisdom about utility spending is correct, but key factors affecting customer satisfaction aren't obvious—and are tricky to control.

Last summer’s union lockout at Consolidated Edison raised novel legal and regulatory questions that remain unresolved. Organized labor can strike, and management can respond, but do state utility commissions have authority to end a lockout that threatens service?

Yet another sweltering summer is causing its share of outages and supply problems, with predictable backlash from customers and policy makers. And with the advances we’ve seen in recent years, perhaps again we should be asking whether we’re adequately focused on our most critical mission: keeping the power on.

Squeezing plant outage duration by days or even weeks can save the industry billions of dollars in lost running time. The San Onofre outage is just the most visible example of what’s at stake for the industry. New outage management technologies and processes allow generators to coordinate outages and get critical plants back online quickly and efficiently.

State commissions can select from a toolkit of regulatory approaches to promote desired utility cybersecurity behavior. One approach is to allow the industry to selfregulate, and another approach is to leave the job to the federal government. But sofar, neither the industry nor the federal government have developed and implemented adequate standards for securing the smart grid. States can play a constructive role—albeit perhaps not in the form of traditional regulation.

On April 30, FERC held a technical conference to review scientific claims and policy arguments about geomagnetic disturbances, known as GMD—how some say that a once-in-a-century solar storm could induce a power surge on the interstate grid so destructive as to cook and fry as many 300 extra-high-voltage transformers, plunging much of the nation into a blackout lasting months or even years. Some researchers even harbor fears that GMDs could end life as we know it.

Amid focused attention on cybersecurity for T&D networks and power plants, one critical system is often overlooked: land-based radios. During an emergency, field crews rely on their ability to communicate with radios, making these systems highly vulnerable targets for malicious attackers. Securing them requires robust technologies and tools, as well as training and practices to ensure their availability when the grid goes down.

The hype over smart grid has become focused on the idea of “advanced distribution management systems” (ADMS). But so far, few utilities have implemented ADMS beyond pilots and incremental tests. Fortnightly analyzes the technology trends and profiles examples of true ADMS in action.

NERC’s critical infrastructure protection (CIP) standards set a minimum level of security performance—and only for high-voltage transmission systems, not the distribution grid. A compliance-checklist approach to security might lack the adaptability needed to combat evolving threats like the Stuxnet worm. A multi-layered, risk-based approach will provide better protection for the emerging smart grid.