WASHINGTON – Today, U.S. Sens. Jim Risch (R-Idaho) and Angus King (I-Maine), both members of the Senate Intelligence Committee and the Senate Committee on Energy and Natural Resources, celebrated the enactment of their bipartisan Securing Energy Infrastructure Act into law. The legislation passed as part of the FY2020 National Defense Authorization Act (NDAA), and will develop defenses for the U.S. energy grid through partnerships between the National Laboratories and industry. The partnerships will utilize engineering concepts to remove vulnerabilities that could allow hackers to access the grid and the nation’s critical infrastructure.
“The vulnerabilities afflicting our critical infrastructure are deeply troubling and there is strong bipartisan agreement that this issue requires our immediate attention,” said Risch. “The Securing Energy Infrastructure Act has been many years in the making, and am confident our national laboratories, particularly the INL in my home state of Idaho, will lead this important research aimed at strengthening our grid security and preventing catastrophic cyberattacks.”
“The energy grid is central to nearly all facets of 21 st century life, but remains vulnerable to hackers,” said King, co-chair of the Cyberspace Solarium Commission. “If this critical infrastructure is compromised, our financial transactions, communications networks, healthcare services, and much more will be at risk. This bipartisan, commonsense legislation will help defend our energy grid from attacks launched from thousands of miles away – I’m heartened to see this much-needed provision signed into law, and deeply grateful for the partnership of Senator Risch in this effort.”
The Securing Energy Infrastructure Act aims to remove vulnerabilities that could allow hackers to access the energy grid through holes in digital software systems. Specifically the Securing Energy Infrastructure Act will direct the Department of Energy to examine ways to replace networked systems with less complex connections limiting paths to attack the systems.
The Act was part of the Damon Paul Nelson and Matthew Young Pollard Intelligence Authorization Act (IAA) for Fiscal Years 2018, 2019, and 2020, which was included in the National Defense Authorization Act for Fiscal Year 2020. This legislation was inspired in part by Ukraine’s experience in 2015, when a sophisticated cyber-attack on that country’s power grid led to more than 225,000 people being left in the dark. The attack could have been worse if not for the fact that Ukraine relies on older, less networked technology to operate its grid. The senators’ bill would build on this concept by studying ways to simplify and isolate the grid’s most important control systems.
More specifically, the legislation will:
• Establish a two-year pilot program within the National Laboratories to study covered entities and identify new classes of security vulnerabilities, and research and test technology that could be used to isolate the most critical systems of covered entities from cyber-attacks.
• Require the establishment of a working group to evaluate the technology solutions proposed by the National Laboratories and to develop a national cyber-informed strategy to isolate the energy grid from attacks. Members of the working group would include federal government agencies, the energy industry, a state or regional energy agency, the National Laboratories, and other groups with relevant experience.
• Require the Secretary of Energy to submit a report to Congress describing the results of the program, assessing the feasibility of the techniques considered, and outlining the results of the working groups’ evaluation.
• Define “covered entities” under the bill as segments of the energy sector that have already been designated as entities where a cyber-security incident could result in catastrophic regional or national effects on public health or safety, economic security, or national security.
In addition to Senators Risch and King, the legislation was cosponsored by Senators Mike Crapo (R-Idaho), Susan M. Collins (R-Maine), and Martin Heinrich (D-NJ). A companion bill was introduced by Representatives Dutch Ruppersberger (D-Md.) and John Carter (R-Tex.) in the House of Representatives.