On February 22, 2024, NARUC and DOE released a set of cybersecurity baselines for electric distribution systems and distributed energy resources. These baselines are intended for state public utility commissions, utilities, and DER operators and aggregators to address cybersecurity risk and enhance grid security. A steering group of regulatory, cyber and industry experts from across the sector helped ensure that a wide range of perspectives were considered during the development phase.
NARUC and DOE are now ready to launch phase 2 of the Cybersecurity Baselines Initiative: developing implementation strategies and guidelines for stakeholders interested in applying the new baselines. This resource will include recommendations for assessing cybersecurity risks, prioritizing the assets to which the cybersecurity baselines might apply, and prioritizing the order in which the baselines might be implemented, based on cyber risk assessments.
Phase 2 will launch in April 2024 and conclude early in 2025. The Steering Group will meet frequently during this period, both in-person and virtually.