Risk
10 Security Risks Faced by the Utility Industry
The utility industry is one of the most important industries in the country — utility companies are the U.S.’s backbone. They provide water, sewage, energy and other basic services to the public and comprise more than $1.5 trillion of the U.S. economy. Unfortunately, despite the importance of these organizations, they can be very vulnerable when it comes to security.
10 risks faced by the utility industry
Cyberattack - From the cyberattack that took down the Colonial Pipeline to concerns about the water utilities being hacked by Russia, there is much concern about utilities’ ability to fend off cyber attack. That concern is justified — although there is legislation aimed at updating the grid, utilities have been the focus of cybercriminals in recent years. According to Verizon’s 2021 Data Breach Investigations Report, 86% percent of the industry’s attacks were the result of social engineering attacks. Ransomware also played a role in attacks on utilities.
Old infrastructure - Much of the U.S.’s critical infrastructure is very old. According to one report, some components of the country’s grid are more than a century old — twice its life expectancy of 50 years. This is problematic for many reasons; old infrastructure wears out, is vulnerable to new digital threats, and may not be replaced until there is an emergency. This means there may not be much standing between the grid and a crisis.
The continuing impact of the COVID-19 pandemic - According to UtilityDive’s 2021 State of the Electric Utility Industry report, the utility industry is continuing to feel the impact of the pandemic, which more than half of utility organizations say has been a top driver of change in the industry. For example, electricity loads had been the same for years, but remote work and the lockdown changed load rates radically, and utility companies had to scramble to keep up. As time moves on, less of an impact will be felt, but many energy companies expect to feel the effects of the pandemic for 1-3 years.
Increasing complexity - New sources of energy are being added to the grid, and existing energy sources are being used to power new items, like electric cars. As renewables are added, and as more power generation sources (like solar panels) are tied to the grid, the power grid will become more complex. The move from centralized to decentralized energy will lead to new challenges, like cost decreases and difficulty in securing the grid.
Weather events - Weather events are getting more severe, and unfortunately, one site disruption can affect the utilities for an entire area. Extreme weather events are something that utility companies must plan for — and something that should inspire an upgrade of aging facilities and infrastructure.
Terrorist attack - While cybersecurity is certainly a concern, so is physical security. A recent bulletin from the Department of Homeland Security warns that domestic terrorist groups “have developed credible, specific plans to attack electricity infrastructure since at least 2020.” Utility companies need to be mindful of threats from inside our borders and from outside the country as well.
Insider threats - As with any organization, the call could be coming from inside the house. If extremists or criminals are working within a utility company, they can create havoc from inside.
Theft - Theft is always an issue and with utilities, theft can take a number of forms, from the traditional insider theft, to theft of energy, to theft of the expensive tools in utility trucks. Be mindful of securing trucks when workers are in the field.
Unhappy customers - As power costs rise, there are likely to be unhappy customers who can’t pay their power bills and some of them may become violent. This can be a problem because many energy companies still accept payments in person. A former client of mine was a power company with an office in a dangerous area. That office was a payment location; the workers there accepted cash payments for power bills. The company wanted that office to be friendly and welcoming, but the workers there were nervous because people knew they kept cash there, and because many frustrated customers would come in. If this is how your company collects payments, it’s important to protect your workers and your assets by securing the payment office.
Defending new energy sources - As we move to new energy sources, like solar and wind, utility companies will be faced with a new challenge: defending the large land areas of wind and solar farms. Having a plan in place to patrol the acreage of large power sources is critical when it comes to moving to renewables. One attack or mishap is all it can take to create a widespread outage.
Securing something as large and widespread as the grid can be daunting, but it is possible if you start with an assessment. Ready to learn how to evaluate the risk at each of your sites? Talk to an expert now about assessing your security.
About the Author
