Let's Get Physical: A New Convergence for Electrical Grid Security

US energy regulators and analysts are urging grid operators to unify cybersecurity with physical security, stressing that IT, OT and physical safeguards must converge to defend critical infrastructure. The piece notes rising cyber and physical threats to the grid, with checks showing a 69% rise in weekly attacks on utilities in H1 2024 compared with 2023, and ransomware and cloud vulnerabilities among top concerns.

It cites Black & Veatch as saying the frequency and sophistication of attacks have escalated since the Colonial Pipeline incident in 2021, a claim attributed to the firm’s analysts. The article highlights regulatory milestones, including CIP-003‑11 and CIP-015‑1, and mentions the Department of Energy’s $45 million energy sector security funding and FERC’s direction to extend monitoring to physical controls.

It also references a February 2023 disclosure that physical attacks on the power grid rose 71% in 2022, and notes that two neo-Nazis were indicted for plotting to attack five substations, underscoring the physical threat landscape. According to Black & Veatch, unifying threat strategies across IT, OT and physical security could yield organisational benefits, with stakeholders urged to close the gap in existing approaches.