Security News > 2022 > October > Utility security is so bad, US DoE offers rate cuts to improve it

In a notice of proposed rulemaking published earlier this week, the DoE said the time was right "To establish rules for incentive-based rate treatments" for utilities making investments in cybersecurity technology.

The DoE said these included products and services, and information like plans, policies, procedures and other info related to cybersecurity tech.

While it's too long to include here, the DoE's language about what it will allow means it could essentially include anything that could "Materially improve cybersecurity," be that a product, service or info-sharing program.

The 2 percent RoE exceeds what the DoE usually offers for similar programs, it said, but noted that the cost of cybersecurity projects are small compared to "Conventional transmission projects."

The 2 percent rate is also necessary to help utilities decide to make security investments without passing costs along to consumers through rate hikes, the DoE said.

The DoE knows the PQ list is small, and as part of the rulemaking process "We seek comment on these and any additional cybersecurity expenditures to consider for inclusion on the initial PQ List," the agency said.

News URL

https://go.theregister.com/feed/www.theregister.com/2022/10/07/utility_security/