Safeguarding The Nation’s Electric Grid

1. Safeguarding The Nation’s Electric Grid As we enter Week 4 of National Cyber security Awareness Month, the theme is “Safeguarding the Nation’s Critical Infrastructure.” Electric cooperatives are proud to play a key role in protecting the security of the nation’s complex, interconnected electric power system. To ensure the reliability and security of the electric grid, co-ops use a flexible approach and draw on a variety of tools and resources. Cyber security threats and threat actors continue to evolve and so must the industry’s capability to defend against them. The possibility of a cyber security attack is something for which the electric sector has been preparing for years. These preparations include: Implementing security standards and technologies to protect our systems. Forging close partnerships within and across the energy sector and government to identify threats and solutions, and to respond to incidents. Engaging in active information sharing about threats and vulnerabilities with our industry and government partners Participating in industry and cross-sector disaster planning exercises Partnering with the Department of Energy (DOE) and other federal agencies on cyber security research to improve the tools and resources needed by industry to address cyber threats. Protecting the electric grid from threats that could impact national security and public safety is a responsibility shared by both the government and the electric power sector. Currently, one of the most valuable research programs for electric co-ops is the funding partnership between DOE and NRECA that we call the Rural Cooperative Cybersecurity Capabilities Program, or RC3. This partnership is specifically focused on addressing the unique cybersecurity needs of small and medium-sized distribution utilities, which comprise much of our membership. RC3 is a three-year program designed to support and improve electric co-op cyber and physical security programs. The program was funded by DOE at $7.5 million over three years. A key part of the RC3 program involves training at co-ops throughout the country. In 2017, six cybersecurity summits were hosted across the country as part of the program, with staff from more than 150 electric co-ops in attendance. Five more will be hosted in 2018 and 2019. Through the RC3 program, NRECA is building a self-assessment toolkit that all co-ops can use. The self- assessment program was launched at select co-ops across the country last year and helps to improve their cybersecurity capabilities. Through the self-assessment program, electric co-ops can identify and implement necessary changes and they can measure their progress over time as they harden their systems. As RC3 moves into its final year of funding and to meet the growing demand for tools and training, NRECA is working to develop a series of resources for co-ops to consult. These include table top exercises that co-ops can use to test their readiness and cyber security guidebooks designed to help a variety of co-op employees better understand cyber preparedness.

2. The industry’s strategies to protect against cyber threats are constantly evolving. Electric cooperatives are working continuously to assess risks and improve our ability to prevent attacks and recover more quickly and safely after an attack. We’re doing everything we can to protect the reliability of the electric grid on which we all depend. For more details please visit the following website: https://www.cbo-it.de/shop/QSFP-Transceiver https://www.gbic-shop.de/sfp-sx-kompatibel