Security News > 2020 > September > FERC, NERC Conduct Study on Cyber Incident Response at Electric Utilities
The U.S. Federal Energy Regulatory Commission and the North American Electricity Reliability Corporation last week released a report outlining cyber incident response and recovery best practices for electric utilities.
The study is based on information provided by experts at eight U.S. electric utilities of various sizes and functions, and its goal was to help the industry improve incident response and incident recovery plans, which authors of the study say help ensure the reliability of the bulk electric system in the event of a cybersecurity incident.
The study found that there is no best incident response and recovery plan model.
Staff at NERC and FERC have identified some practices that all electric utilities should consider when developing an IRR plan.
Another important factor that needs to be considered in this phase is related to the resource implications of an incident response of indeterminate length.