Passing of Senate’s Energy Bill Signals a Renewed Focus on Cybersecurity of Power Grid

May 11, 2016

Reading Time : 2 min

By: Shawn Whites (paralegal), David S. Turetsky, Visiting Professor, College of Emergency Preparedness, Homeland Security, and Cybersecurity at the University of Albany

The Act amends Part II of the Federal Power Act to provide the secretary of the Department of Energy (DOE), under direction from the President, with the authority to order “any entity that is registered with the [North American Electric Reliability Corporation (NERC)] as an owner, operator, or user of the bulk-power system to take such actions as the secretary determines will best avert or mitigate” cybersecurity threats.1  In carrying out such an order, the secretary is required under the Act to coordinate with Canada and Mexico on interconnection issues that might arise as a result of the cybersecurity threat, as well as consult with various affected parties (grid operators and generators; NERC; the Electricity Subsector Coordinating Council; and federal and state agencies).  Taking into account the added costs that electric utilities and generators might face due to an emergency order, the Act directs the Federal Energy Regulatory Commission (FERC) to adopt regulations that permit affected parties to “seek recovery of prudently incurred costs” from their ratepayers.

Like other provisions of the Act focused on channeling investments in modern grid technologies and infrastructure, the Act directs $100 million worth of funding per year from 2017 to 2025 towards four separate DOE-led programs designed to (i) advance cybersecurity applications and technologies for the energy sector; (ii) identify vulnerabilities of energy sector supply chain products to known cybersecurity threats; (iii) enhance the emergency response capabilities of the DOE and expand cooperation of the DOE with the intelligence communities for energy‑sector-related threat collection and analysis; (iv) and secure energy networks, including electric, natural gas and oil exploration, transmission and delivery.

Finally, the Act exempts critical electric infrastructure information (CEII) from disclosure under the Freedom of Information Act,2 directs FERC to work with the DOE to issue such orders and regulations regarding the proper sharing and designation of CEII, and designates the DOE as the sector-specific agency for cybersecurity for the energy sector.


1 The Act defines a cyber security threat as the “imminent danger of an act that severely disrupts, attempts to severely disrupt, or poses a significant risk of severely disrupting the operation of programmable electronic devices or communications networks (including hardware, software, and data) essential to the reliable operation of the bulk-power system.”

2 5 U.S.C. § 552(b)(3).

Share This Insight

Previous Entries

Speaking Energy

November 12, 2025

On November 7, 2025, the New York Department of Environmental Conservation (NYSDEC) and the New Jersey Department of Environmental Protection (NJDEP) reversed their prior positions and approved Clean Water Act (CWA) Section 401 Water Quality Certifications and other environmental permits for the Transcontinental Gas Pipeline Company’s (Transco) Northeast Supply Enhancement Project (NESE). NESE is a 25-mile natural gas pipeline expansion project certificated by the Federal Energy Regulatory Commission (FERC) that is intended to deliver 400,000 dekatherms per day of natural gas produced in Pennsylvania to local distribution company customers in New York City through new facilities in Middlesex County, New Jersey and an underwater segment traversing the Raritan and Lower New York Bays.

...

Read More

Speaking Energy

November 6, 2025

The market for the direct procurement of energy by commercial and industrial buyers has been active in the U.S. for a decade.  In years past, buyers often engaged in such purchases on a voluntary basis to achieve their goals to use renewable energy.  These days, C&I buyers are turning to direct procurement or self-supply to obtain a reliable source of energy.  Sufficient and accessible energy from a local utility may not be available or may be materially delayed or trigger significant capital costs.  This is a material change driven in part by increased demand for electricity, including demand from data centers, EV infrastructure and industrial development.       

...

Read More

Speaking Energy

October 27, 2025

On October 23, 2025, the Secretary of the U.S. Department of Energy (DOE) directed the Federal Energy Regulatory Commission (FERC) to conduct a rulemaking to assert jurisdiction over load interconnections to the bulk electric transmission system and establish standardized procedures for the interconnection of large loads.1 The Directive included an advanced notice of proposed rulemaking (ANOPR) that sets forth the legal justification for asserting jurisdiction over transmission-level load interconnections and fourteen principles that should inform FERC’s rulemaking process. The Secretary has directed FERC to take “final action” on the Directive no later than April 30, 2026.

...

Read More

Speaking Energy

October 24, 2025

On October 21, 2025, the U.S. Department of Energy (DOE) issued a final order (DOE/FECM Order No. 5264-A1) granting Venture Global CP2 LNG, LLC long-term authorization to export up to 1,446 billion cubic feet per year of domestically produced liquefied natural gas (LNG) from its Louisiana facility to countries without a free trade agreement with the United States (Non-FTA Countries). The final order follows a March 2025 Conditional Order,2 which issued while DOE was still completing its review of the agency’s 2024 LNG Export Study.3 The final order confirms that the project’s export volume and term authorization (through December 31, 2050) are unchanged, but provides for a three-year “make-up period” to allow export of any approved volume not shipped during the original term.

...

Read More

© 2025 Akin Gump Strauss Hauer & Feld LLP. All rights reserved. Attorney advertising. This document is distributed for informational use only; it does not constitute legal advice and should not be used as such. Prior results do not guarantee a similar outcome. Akin is the practicing name of Akin Gump LLP, a New York limited liability partnership authorized and regulated by the Solicitors Regulation Authority under number 267321. A list of the partners is available for inspection at Eighth Floor, Ten Bishops Square, London E1 6EG. For more information about Akin Gump LLP, Akin Gump Strauss Hauer & Feld LLP and other associated entities under which the Akin Gump network operates worldwide, please see our Legal Notices page.