NARUC, NASEO release solar cybersecurity advisory toolkit for state offices and utility commissions

State energy offices and public utility commissioners gained a new tool at the end of September to help them protect solar power from cyberthreats, thanks to the release of the Cybersecurity Advisory Team for State Solar (CATSS) Toolkit.

Released by the National Association of State Energy Officials (NASEO) and the National Association of Regulatory Utility Commissioners (NARUC), with support from the U.S. Department of Energy Solar Energy Technologies Office (SETO), this product offers security information related to solar power. It drew from state, federal and private-sector insights into cybersecurity, the grid, solar power and other distributed energy resources (DERs) to guide cybersecurity actions for states, utilities and the industry at large.

In doing so, the kit focused on two areas: education/risk awareness and practical actions. The former includes a general overview of photovoltaic solar engineering and systems, a quick guide to standards, questions to ask to assess solar cybersecurity and an array of hypothetical attack scenarios. The latter focuses more on case studies and models to build cybersecurity working groups, considerations, design guidance and state legislative options.

“Cybersecurity remains a high priority for NARUC, as state regulation methods continue to adapt to a more digital society,” Greg White, NARUC executive director, said. “New cybersecurity resources for solar and DERs are welcome additions that help PUCs confidently navigate the ever-changing energy landscape.”

Prior to this, the two organizations stressed, most efforts at cybersecurity have focused on conventional electric-sector assets, leaving a blind spot for the solar industry to navigate. With DERs increasing in usage as the electric transition expands, however, people are becoming more reliant on these sectors for their daily lives, adding danger to such blind spots.

“As the leaders in state energy policy and program development in support of their governors’ and legislators’ cybersecurity and DER goals, State Energy Offices are increasingly engaged in cybersecurity actions,” David Terry, president of NASEO, said. “This toolkit will help states achieve their energy and resilience goals by creating more cyber-secure distributed energy resources.”

The CATSS tools NASEO and NARUC developed were meant to be foundational materials for those seeking to limit cybersecurity risks, rather than a comprehensive, end-all for the matter.