Llewellyn King: The scary potential of cyberattacks on utilities make microgrids look better

In engineering there are credible and incredible failures. Nuclear-power plants were designed against what was believed to be a “maximum credible accident.” Then came Fukushima, incredible.

In early December, a report from the National Infrastructure Advisory Council (NIAC) raised the possibility that a huge electric failure, the result of a concerted cyberattack or other event, could knock out electric supply in large swathes of the country for an extended period, weeks even months. A failure with consequences which would have been beyond thinkable before the computer age.

The report, which comes from an advisory council whose mission is to inform the president, has a weight that a think-tank study, for example, would not have. Here, it is the voice of the energy establishment speaking.

I found in reading this report and talking to people in the industry and in academia, it is easy to predict the end of social order as we know it.

It is a painful mind game to try to think how long families could survive without electricity. First off, you would be hot or cold, every appliance in the home would not work. Even if you have a generator, in short order the fuel, natural gas or gasoline, would be gone. How much non-perishable food do you have? I suspect most families would be going hungry after a few days. I would. Cell phones would run down and stay down, and the networks would collapse.

We would be reduced to living like animals without the skills that are inherent to animals. In bad scenarios, families with guns would outlast families without – for a few days.

Survivalists would be proven right as they hung on, maybe for a few months, hunting for fresh food, hoping for clean water, and living off the non-perishable food they have stockpiled. Rumor would dominate as communications failed.

Electric utilities live in a world in which their realities are changing. Wildfires in California and Australia have pointed to a new liability for the companies: accidental ignition through falling lines, likely to get more serious as weather gets more aberrant and droughts become the normal in a time of climate change. That, together with cyberattack, puts them in a place of vulnerability they never anticipated.

Utilities are proud of their expertise – and justifiably so -- in responding to short-term outages, even major ones. They rush crews to the scene, and with military zeal get the lines up and the power flowing.

Then came Puerto Rico after hurricanes Irma and Maria, which gave an inkling of what happens when the grid fails: total devastation and maybe as many as 2,975 lives lost.

The NIAC report cites Puerto Rico and emphasizes cascading, blackouts as the grid begins to fail. As it is, utilities fend off daily cyberattacks, and every executive I have interviewed has emphasized that cyberattack is “what keeps me awake at night” – as Jacqueline Sargent, general manager and CEO of Austin Energy, told me recently.

The utility industry, often keen to be reassuring, was part of the preparation of the NIAC report. Scott Aaronson, point man in the industry’s trade organization the Edison Electric Institute, was involved in the report and has been raising the alarm in interviews since its release.

A new seriousness in the federal government, particularly in the Department of Homeland Security, the Department of Energy and the Pentagon, shows that the threat is real and credible. The White House has said nothing.

Changes not dictated by cyberattack defense, but which might aid it, are on the way. Small entities known as microgrids are cropping up. Think of the old utility model with central power stations as a city. The new one is a series of microgrids, more like villages, loosely connected and isolatable, and depending on local generation from solar and wind.

Also, the technology of defense against cyberattack is growing; There is a large cyber-defense industry. It is an escalating battle in which the defenses improve as the threat multiplies, a kind of cold war with weaponized computers.

In the new year, the invisible enemy will be engaged more than ever. But who knows what is enough? In the NIAC report, insiders have sounded the alarm about their own defenses. That is serious, credible.

On Twitter: @llewellynking2

Llewellyn King is executive producer and host of White House Chronicle, on PBS. He’s based in Rhode Island and Washington. D.C.

Watch the latest White House Chronicle:

The nation’s democracy crisis, with Joe Madison and Hedrick Smith

Cyberterrorism: Will Russia, China and/or ISIS turn off our electrical power?

We just got this press release about an important conference on Newport. 

Two of the best-known publishers of energy newsletters, Sam Spencer, who publishes Smart Grid Today and Power Markets Today and Llewellyn King, who founded The Energy Daily and produces and hosts White House Chronicle, on PBS, are teaming up with the Pell Center at Salve Regina University on a comprehensive conference on cybersecurity in the utility industry. 

“Grid cybersecurity is one of the critical frontiers in the security of the U.S. infrastructure system,” King said.

The conference will be held Sept. 26-29, 2016 at Salve Regina University in Newport.  “In this scholarly setting the industry can learn best practices; cybersecurity vendors and others can get down to granular issues that aren’t easily discussed in the office setting,” Spencer said.

The “Newport Conference” will bring together utility IT officers, managers, first responder teams as well as vendors of firewalls, alarms and other security systems for utilities.

“The utility industry is undergoing great changes in its structure. It is being reshaped by disruptive technologies, environmental pressures and social expectations.

“More and more, the old grid is giving way to the new grid in a sophisticated, computer-dominated world where the enemy could be in any line of code, any weak link in the industry,” Spencer said.

King added: “The first goal of modern warfare is to take out the electrical supply, and the rest follows from there. As a result, those who wish to do harm to a country — and to the United States, in particular — are aware that without electricity, a great nation is paralyzed.”

He said that he saw the precursor to this kind of havoc back in 1965, when most of the Northeast went dark. That was incredible but today, with more reliance on electricity throughout the life of the nation, things would be even worse.

King and Spencer said enemies, both state and non-state (like ISIS), are hard at work probing our cyber-defenses, seeking weakness and waiting to strike.

“We want to advance the understanding of the threat as well as to ensure that the best practices in cybersecurity are being followed as the grid itself changes into something new and even more electronically interconnected than in the past,” they said.

For sponsorship and registration information, please contact Llewellyn King at 1-202-662-9731 or 1-202-441-2702, or e-mail him at llewellynking1@gmail.com.