{"id":100149,"date":"2022-10-06T15:14:22","date_gmt":"2022-10-06T19:14:22","guid":{"rendered":"https:\/\/www.solarpowerworldonline.com\/?p=100149"},"modified":"2022-10-06T15:14:22","modified_gmt":"2022-10-06T19:14:22","slug":"doe-calls-for-increased-cybersecurity-measures-prepare-der-growth","status":"publish","type":"post","link":"https:\/\/www.solarpowerworldonline.com\/2022\/10\/doe-calls-for-increased-cybersecurity-measures-prepare-der-growth\/","title":{"rendered":"DOE calls for increased cybersecurity measures in preparation for rapid distributed energy growth"},"content":{"rendered":"

\"\"The U.S. Department of Energy (DOE) released a long-term evaluation<\/a> of the cybersecurity considerations associated with distributed energy resources (DER), such as distributed solar, storage and other clean energy technologies, and the potential risks to the electric grid over the next ten years. The study finds that while a cyberattack on today\u2019s DER systems would have a negligible impact on grid reliability depending on grid conditions and regional DER installation and integration, the projected growth and evolution in DER deployment could pose cybersecurity challenges for future electric power grid operations if cybersecurity is not taken into consideration. The report presents strategies that DER operators and electric power entities could undertake to make the grid more secure, as well as policy recommendations for decision-makers.<\/p>\n

\u201cWe have a strategic opportunity like we\u2019ve never had before,\u201d said Puesh Kumar, director of DOE\u2019s Office of Cybersecurity, Energy Security and Emergency Response (CESER). \u201cWe can address both climate risks by deploying clean energy solutions and integrate cybersecurity into those systems from the ground-up. This is good for U.S. energy security and U.S. national security. This report is meant to start these critical conversations between the clean energy and cybersecurity communities, particularly as we begin to make historic investments in the U.S. electric grid through the Infrastructure Investment and Jobs Act (IIJA).\u201d<\/p>\n

\u201cTo scale up clean energy deployment, we must ensure that our electricity systems are secure and resilient to disruption,\u201d said Alejandro Moreno, Acting Assistant Secretary for Energy Efficiency and Renewable Energy (EERE). \u201cThis crucial report lays out key cybersecurity challenges associated with wide-scale distributed energy deployment so clean energy industries and other stakeholders can work to reduce risks and protect American families.\u201d<\/p>\n

DOE has maintained the importance of ensuring power grid cybersecurity while achieving critical decarbonization goals essential to addressing climate change. DOE\u2019s goal is to ensure that cybersecurity is fully engineered from ideation to deployment in relevant clean energy research, development and deployment efforts. This \u201ccyber by design\u201d strategy leverages opportunities early in the design lifecycle to proactively reduce cyber risk rather than attempt expensive aftermarket bolt-on efforts.<\/p>\n

Large energy resources, like a utility-scale wind or solar plant, are connected to the transmission grid, while DER are smaller in scale and are connected to the distribution grid where residences and businesses are also connected. There are about 90 GW of DER installed today, half of which are rooftop solar systems \u2014 accounting for over 3 million systems. DER deployment is expected to quadruple by 2025 to approximately 380 GW. Each of those systems uses software and networks to integrate with electric power operations, and those systems could be hacked. Depending on systems conditions, a fleet of DER aggregated to significant size could pose a reliability challenge if under the control of an advanced, capable attacker and if cybersecurity considerations and threat mitigation strategies are ignored.<\/p>\n

The Cybersecurity Considerations for Distributed Energy Resources on the U.S. Electric Grid report, developed by CESER and EERE, provides recommendations for the DER industry, energy sector and government to take action and secure current and future systems. The report also acknowledges the ongoing need to engage with DER industry stakeholders to develop cybersecurity standards and best practices, provide education and training and establish information sharing mechanisms. Broad industry involvement is key to developing robust DER cybersecurity standards. As outlined in the report, DOE also intends to fund research on next-generation DER defenses, including security-by-design and the recently released Cyber-Informed Engineering Strategy, to ensure security in a decarbonized grid.<\/p>\n

Deployment of wind, solar and energy storage will help to achieve the nation\u2019s clean energy goals, diversify the electricity supply and make the grid more resilient to outages, making investment in security for DER essential to safeguarding the nation\u2019s energy infrastructure.<\/p>\n

The study\u2019s key recommendations include:<\/p>\n