EEI supports Senate bill to improve cybersecurity at DOE

A bill designed to improve cybersecurity within the Department of Energy (DOE) was introduced in the U.S. Senate last week.

The bipartisan Cyber Sense Act (S.4795), introduced by Sens. John Hoeven (R-ND) and Jacky Rosen (D-NV), would create a voluntary Cyber Sense program at the DOE to test the cybersecurity of products and technologies used in the bulk-power system.

“Our nation’s energy systems are essential to every home and business, and vulnerabilities in the grid and other infrastructure represent a real risk to the well-being of our citizens,” Hoeven said. “Our legislation supports the development and implementation of technologies and practices that will better secure our energy infrastructure from cyber-based attacks, protecting against those who would do us harm.”

The proposed Cyber Sense program would identify and promote cyber-secure products for use in the bulk-power system. It would also establish a testing process for the products and a reporting process of cybersecurity vulnerabilities and require the Secretary of Energy to keep a related database on the products to aid electric utilities that are evaluating products and their potential to cause harm to the electric grid. It would also direct the Secretary of Energy to consider incentives to encourage the use of analysis and results of testing under the program in the design of products and technologies for use in the bulk-power system.

“If we don’t act to address and mitigate cybersecurity risks, our nation will remain vulnerable,” Rosen said. “As our world becomes more digitized, the need for a strong defense of our nation’s electric infrastructure has never been more clear.”

The proposed legislation drew the support of the Edison Electric Institute (EEI).

“Protecting our industry’s supply chain is a top priority for all EEI member companies, and addressing the known dynamic threats requires constant vigilance and coordination that leverages both government and industry resources,” Tom Kuhn, president of Edison Electric Institute, said. “That is why electric companies work with government partners to share actionable intelligence, deploy state-of-the-art tools, and prepare to respond to incidents that could affect our systems. The Cyber Sense Act would enhance this partnership by creating a voluntary Department of Energy program to identify and promote cyber-secure products for use in the bulk-power system. The bill also establishes an important testing and reporting process for products determined to have cyber vulnerabilities.”

Companion legislation, introduced in the House by Reps. Jerry McNerney (D-CA) and Bob Latta (R-OH), passed in the House last week. October is Cybersecurity Awareness Month.

“EEI applauds Senators Jacky Rosen and John Hoeven and Representatives Bob Latta and Jerry McNerney for their leadership on this issue, which is important to America’s economy and national security,” Kuhn added.