Cyber Attack! CIP Goes Live

Utilities are gearing up for cyber security compliance. Will the standards prove worthy?

The NERC CIP standards represent an historic achievement. They include the first mandatory cyber security requirements of their kind to be imposed on a U.S. private-sector industry. Considering the scope and sensitivity of the grid-security issue, developing a set of enforceable standards inevitably would entail a complex and contentious process. From that perspective, NERC, FERC and the industry have made remarkable progress, and their efforts deserve accolades.

Cyber Attack! - Defining 'Critical Assets'

ERCOT utilities approach CIP compliance from varying perspectives

As proposed by the North American Electric Reliability Corp., the new critical infrastructure protection (CIP) standards charge utilities with identifying their own critical assets and related cyber systems. This approach allows great flexibility for utilities to apply the CIP standards to their particular situations. This will help ensure that their efforts focus on securing critical assets, rather than on complying with an overly prescriptive set of mandates that might or might not yield a secure grid.

Cyber Attack! - Lessons Learned: Aurora Attack

Test gets major media hype, but SCADA vulnerabilities remain

A simulated attack, named the Aurora Generator Test, took place in March 2007 by researchers investigating supervisory control and data acquisition (SCADA) system vulnerabilities at utility companies. The experiment involved hackers invading the plant’s control system to change the operating cycle of the generator.

Cyber Attack! - Smart-Grid Security

Intelligent power grids present vexing cyber security problems

In a world where streetlights can be used as a weapon, controlling local utility networks becomes more than just a matter of public convenience and necessity. It becomes a matter of public safety and even national security. And in that world, the idea of an inter-networked, automated distribution grid poses troubling questions about cybersecurity vulnerabilities.

California: Mandating Demand Response

California’s load-management experience argues for formal DR standards

California hopes to reap $3 billion in benefits from demand response over the next 20 years. Maximizing the potential may require the California Energy Commission to exert its statutory authority. CEC’s chair co-authors.

Duke's Fifth Fuel

Conservation investments benefit participants and non-participants alike

For-profit energy efficiency programs are coming. Duke Energy proposes to align the interests of shareholders and retail customers within an expanded least-cost approach. Convincing regulators will require taking a holistic view of the costs and benefits.

Hot-Potato Policy

DOE loan guarantees degenerate into a political game.

Once upon a time, the U.S. Congress started a game of hot potato. The potato, otherwise known as the EPAct Title XVII Loan Guarantee Program, has been bouncing around Washington, D.C., since 2005. But now that the industry is getting a good look at the potato, it looks decidedly funky—stuffed with caveats and half-measures. Whether that’s good or bad depends largely on whether you believe the government belongs in the potato game in the first place.

People

American Electric Power named Michael Rencheck senior vice president and chief nuclear officer for its D.C. Cook Nuclear Plant in Bridgman, Mich. The American Public Power Association elected Roger B. Kelley to its board of directors. OGE Energy Corp. named Danny P. Harris as COO. Glen Justis joined Deloitte & Touche LLP as a director in the global energy markets group of the organization’s regulatory and capital markets practice. And others...

Horse-Manure Crisis

Freakonomics author Steven D. Levitt suggests science and market forces will eliminate the climate-change problem with minimal effort.

Freakonomics author Steven Levitt compares the carbon buildup to horse manure in the 1890s. “Everything we know from the past and what I know from talking to scientists tells me technology is likely to be the solution,” he says.

Letters to the Editor

(December 2007) John Ferguson responds to “Creating the Perfect Regulator”: "Burr identifies four fundamental goodness traits: omniscience, Solomonic wisdom, clairvoyance and righteousness. Inherent in these traits, but not specifically addressed by Burr, is the ability to recognize and reject advice from those interested in telling the regulator what the advisors think the regulator wants to hear instead of what the regulator should hear."