Laserfiche WebLink
AMERICAN <br /> PUBLIC <br /> RTM <br /> ASSOCIATION <br /> Powering Strong Communities <br /> ISSUE BRIEF January 2017 <br /> Physical Security and the Electric Sector <br /> Summary Gas and Electric's(PG&E)system in California where at least <br /> While threats from cyber attackers are on the rise,public power one person fired over 150 rounds of ammunition and cut two <br /> utilities also face threats to their physical infrastructure—the critical telecommunications cables to the substation.These and <br /> poles,wires,substations,transformers,and generating facilities several other press reports on attacks on utility infrastructure <br /> comprising these utilities'means of delivering electricity to their have caused some Members of Congress to react by introducing <br /> customers.The majority of physical-security threats to electric or exploring legislation related to utility security. <br /> infrastructure,such as copper theft,have been known for years. <br /> However,more sophisticated threats have emerged with the at- <br /> tack on a California substation in April 2013.While customers Congressional and Regulatory Action <br /> did not lose power as a result of the attack due to the redundan- The nation's electric distribution systems have always been,and <br /> cy built into the system,it was a reminder to law enforcement are today,regulated by state and local governments.This is a <br /> and electric utilities about the importance of working together deliberate separation of power given the retail nature of distribu- <br /> to protect critical utility assets. tion systems,and the vast differences in the configuration,size, <br /> Electric utilities,including public power utilities,take and ownership of the 3,000 distribution utilities in the U.S. <br /> physical(and cyber,as discussed in the companion issue brief Given this situation,each individual utility's role in the secu- <br /> "Cybersecurity and the Electric Sector") threats seriously and rity of its distribution facilities is paramount.However,in the <br /> employ risk management programs to prioritize facilities and past few Congresses,several legislative proposals have included <br /> equipment,develop contingency plans,and employ defense-in- physical-security requirements for electric utilities.While the <br /> depth techniques to"keep the lights on." American Public Power Association(Association or APPA) <br /> supports physical security initiatives at the bulk power system <br /> and distribution levels,we do not support a federally legislated <br /> Background "one-size-fits-all"mandate due to the differences in systems and <br /> Public power utilities intimately understand the importance of regions noted above. <br /> physical security and have longstanding programs and protocols <br /> The North American Electric Reliability Corporation <br /> designed to protect their utility systems.As the nature of phys (NERC),which promulgates mandatory and enforceable stan- <br /> ical threats has changed over the years,public power utilities dards for the federally jurisdictional bulk power system to ensure <br /> have planned,prepared,and responded accordingly.Today,due the reliability of that system,has considered proposals and <br /> to security breaches,such as vandalism and terrorist attacks that issued regularly updated security guidelines that would enhance <br /> physical-security requirements related to access to cyber assets <br /> can cause damage to this infrastructure,utilities must develop <br /> at electric utilities.' In response to developing threat analysis <br /> the best available mitigation practices to address such attacks. <br /> Physical infrastructure security can range from a substation with in March 2014,the Federal Energy Regulatory Commission <br /> cameras,locks,and fences to engineering new facilities utilizing (FERC) used its authority under Section 215 of the Federal <br /> design bases threat methodology. Power Act to direct NERC to submit within 90 days proposed <br /> reliability standards requiring utilities with critical assets to <br /> In recent years,a few high profile incidents of physical <br /> take steps to address physical security vulnerabilities.NERC <br /> security failure have drawn increased scrutiny from several <br /> areas.One incident that received press attention was a shooting <br /> incident at a transformer at an Arkansas utility.Another high 1 (See APPA's"Electric Transmission Policies"issue brief for additional informa- <br /> profile incident took place at the Metcalf substation on Pacific don on the bulk power system.) <br /> PubticPower.org 13 <br /> 195 <br />