FERC Issues White Paper on Cybersecurity Incentives

Jun 23, 2020

Reading Time : 2 min

Background

Earlier this year, the Commission proposed to revise its existing transmission incentives policy under Section 219 of the Federal Power Act (FPA).1 Left out of that proposal was cybersecurity, an issue the Commission decided to address independently in a separate proceeding.2 The White Paper initiates that effort. Specifically, the White Paper discusses augmenting the current Critical Infrastructure Protection (CIP) Reliability Standards with an incentive-based approach pursuant to FPA Section 219.

The Commission’s CIP Reliability Standards, promulgated under FPA Section 215, have served as FERC’s primary tool for regulating cybersecurity practices. They require certain users, owners and operators of the bulk electric system to comply with requirements to safeguard critical transmission system assets. FERC categorizes assets according to the risk to the bulk electric system—high, medium or low—if the assets are compromised, with different requirements applying depending on the risk category. Most of the requirements apply to the high- and medium-risk categories.3   

In the Commission’s view, these standards establish an effective “technical baseline for cybersecurity practices,” but have limitations. For example, these mandatory standards are not particularly nimble in the face of rapidly evolving threats, nor do they apply to the full suite of operational technologies that can have an impact on the grid’s security. The incentive-based approach contemplated in the White Paper is intended to encourage utilities to adopt best practices and make voluntary investments in cybersecurity.

The White Paper

The White Paper proposes two approaches for identifying investments eligible for incentives. Under the first approach, a utility could seek incentive treatment for applying CIP Reliability Standards requirements to transmission facilities that are not subject to those requirements. For example, the utility could propose to apply standards applicable to high- and medium-risk assets to low-risk assets. This approach has the benefit of using an existing, familiar set of requirements.

The second approach would be based on an entirely different set of standards—the cybersecurity framework developed by the National Institute of Standards and Technology (NIST). Under this approach, an applicant would have to demonstrate that a cybersecurity investment meets NIST security controls and would exceed the requirements of the CIP Reliability Standards.

The Commission notes in the White Paper that utilities could be eligible for a return on equity (ROE) adder as high as 200 basis points under these contemplated reforms, although any such incentive treatment may be subject to a sunset provision.4 Given how quickly cybersecurity threats and best practices evolve, FERC proposes no more than three to five years as an appropriate sunset period. Moreover, the Commission notes the possibility that certain investments eligible for incentives may eventually become mandatory, in which case the incentive treatment would end at the earlier of the sunset date and the date when such investment(s) become mandatory.

As noted above, interested parties are invited to provide comments on the issues discussed in the White Paper. Parties may also address in their comments the 11 specific questions provided at the end of the White Paper.5


1 Elec. Transmission Incentives Policy Under Section 219 of the Fed. Power Act, Notice of Proposed Rulemaking, 170 FERC ¶ 61,204 (2020).

2 Id. P 5.

3 See White Paper, Appendix – CIP Reliability Standards Impact-Level Summary.

4 Non-ROE incentive rate treatment may be considered as well. Id. at 13.

5 See id. at 26-27.

Share This Insight

Previous Entries

Speaking Energy

August 15, 2025

On August 8, 2025, the Federal Energy Regulatory Commission (FERC) issued an enforcement order in Skye MS, LLC (Skye) and levied a $45,000 civil penalty on an intrastate pipeline operator in Mississippi, resolving an investigation into the operator’s violations of section 311 (Section 311) of the Natural Gas Policy Act (NGPA). FERC faulted the operator for providing a Section 311 transportation service without timely filing a Statement of Operating Conditions (SOC) and obtaining FERC’s approval for the transportation rates. Section 311 permits intrastate pipelines to transport interstate gas “on behalf of” interstate pipelines without becoming subject to FERC’s more extensive Natural Gas Act (NGA) jurisdiction, but requires the intrastate pipeline to have an SOC stating the rates and terms and conditions of service on file with FERC within 30 days of providing the interstate service. Under the NGPA, Section 311 rates must be “fair and equitable” and approved by FERC. In Skye, FERC stated that the operator began providing Section 311 service on certain pipeline segments in Mississippi in May 2023, following their acquisition from another Section 311 operator, but did not file an SOC with FERC until April 2025. The order ties the penalty to the approximately two-year delay between commencement of the Section 311 service and the SOC filing date. The pipeline operator was also ordered to provide an annual compliance report and to abide by additional verification requirements related to the filing of its FERC Form No. 549D, the Quarterly Transportation & Storage Report for Intrastate Natural Gas and Hinshaw Pipelines.

...

Read More

Speaking Energy

August 6, 2025

In Sierra Club v. FERC, No. 24-1199 (D.C. Cir. Aug. 1, 2025), the U.S. Court of Appeals for the District of Columbia Circuit (D.C. Circuit) upheld the Federal Energy Regulatory Commission’s (FERC) approval of a 1,000-foot natural gas pipeline segment crossing the United States-Mexico border (the Border Pipeline) under section 3 of the Natural Gas Act (NGA), rejecting environmental groups’ challenges that FERC improperly limited its analysis under both the NGA and the National Environmental Policy Act (NEPA), as related to a 155-mile intrastate “Connector Pipeline” constructed upstream of the Border Pipeline in Texas.

...

Read More

Speaking Energy

July 17, 2025

On July 15, 2025, the Federal Energy Regulatory Commission (FERC or Commission) issued an order1 proposing to eliminate the soft price cap of $1,000 per megawatt-hour (MWh) for bilateral spot sales in the Western Electricity Coordinating Council (WECC) that was implemented following the California energy crisis. If adopted, the Commission’s proposal would eliminate the requirement that sellers make a filing with FERC cost justifying spot market sales in excess of the soft price cap, which have become increasingly common in recent years as market conditions have continued to tighten throughout the West. Eliminating the WECC soft price cap would provide sellers that make sales during periods when prices exceed the cap greater certainty that their sales will not be second guessed after the fact.

...

Read More

Speaking Energy

June 25, 2025

On June 4–5, 2025, the Federal Energy Regulatory Commission (FERC or Commission) hosted a commissioner-led technical conference to discuss resource adequacy challenges facing regional transmission organizations and independent system operators (RTO). The conference is a response to the growing concern that multiple RTO regions across the country may not have sufficient supply available in the coming years to meet demand due to resource retirements, the pace of new generation entry and higher load growth arising from the construction of data centers and reindustrialization.

...

Read More

Speaking Energy

June 12, 2025

We are pleased to share the presentation slide deck and a recording of Akin’s recently presented webinar, “Navigating U.S. Policy Shifts in the Critical Minerals Sector.”

...

Read More

Speaking Energy

June 10, 2025

On June 4, 2025, the U.S. Department of Transportation’s (DOT) Pipeline and Hazardous Materials Safety Administration (PHMSA) announced revisions to its procedures for pipeline safety enforcement actions. The changes, outlined in two new policy memoranda from PHMSA’s Office of the Chief Counsel (PHC), aim to enhance due process protections for pipeline operators by clarifying how civil penalties are calculated and expanding the disclosure of agency records in enforcement proceedings.

...

Read More

Speaking Energy

May 22, 2025

On May 19, 2025, the Department of Energy (DOE) finalized its 2024 LNG Export Study: Energy, Economic and Environmental Assessment of U.S. LNG Exports (the 2024 Study) through the release of a Response to Comments on the 2024 Study. The Response to Comments concludes that the 2024 Study, as augmented through public comments submitted on or before March 20, 2025, supporting a finding that liquefied natural gas (LNG) exports serve the public interest. With the comment process complete, DOE will move forward with final orders on pending applications to export LNG to non-free trade agreement (non-FTA) countries.

...

Read More

Speaking Energy

May 20, 2025

On Thursday, May 15, the Senate Commerce, Science & Transportation Subcommittee on Surface Transportation, Freight, Pipelines and Safety held a hearing titled, “Pipeline Safety Reauthorization: Ensuring the Safe and Efficient Movement of American Energy.” The hearing examined legislative priorities for reauthorizing the Pipeline and Hazardous Materials Safety Administration (PHMSA).

...

Read More

© 2025 Akin Gump Strauss Hauer & Feld LLP. All rights reserved. Attorney advertising. This document is distributed for informational use only; it does not constitute legal advice and should not be used as such. Prior results do not guarantee a similar outcome. Akin is the practicing name of Akin Gump LLP, a New York limited liability partnership authorized and regulated by the Solicitors Regulation Authority under number 267321. A list of the partners is available for inspection at Eighth Floor, Ten Bishops Square, London E1 6EG. For more information about Akin Gump LLP, Akin Gump Strauss Hauer & Feld LLP and other associated entities under which the Akin Gump network operates worldwide, please see our Legal Notices page.