National Governors Association - State Roles in Enhancing the Cybersecurity of Energy Systems and Infrastructure
Protecting the nation’s energy system and infrastructure from cyber threats is of vital importance to governors, and the risks appear to be growing. Those threats have joined long-standing ones from natural disasters and physical attacks.
Governors face several challenges in protecting critical energy assets from cyber threats and adequately responding to disruptions caused by a cyber attack. They include limited state-level experience with cyber-related response and recovery activities in general, limited understanding of the threats and risks associated with cyber attacks on the energy system, and an energy system that is interstate and interdependent with other critical infrastructure networks. Governors can confront those challenges and enhance the cybersecurity of the energy infrastructure within their state through the following actions:
Adapt existing response,recovery, and resilience measures for natural disasters to cybersecurity
Set specific roles and responsibilities for agencies that interact with the energy sector
Promote a risk-based approach to cybersecurity among utilities that adapts to evolving threats
Convene state and regional players for planning, exercises, and information sharing