Hackers who once focused on oil and gas producers have been increasingly targeting the electric grid, according to a new report by ICS security firm Dragos.

FERC allowed Duke to treat its Cybersecurity Informational Technology-Operational Technology Program as a single project for calculating allowance for funds.

NERC announced it will conduct a formal review of the effectiveness of its new supply chain standards, which take effect July 1.

FERC is engaged in a debate with ReliabilityFirst over the modeling transmission owners should undertake to identify “critical” substations under CIP-014.

The team considering changes to supply chain standards may leave two key definitions in their form due to scope creep and communication issues.

Processing NERC violations is getting more difficult — at least in ReliabilityFirst, says the regional entity’s enforcement chief.

FERC is rethinking its cybersecurity strategy by reorganizing two departments and directing its efforts at five “focus areas.”

Limits of grid exercises and simulation tools, and the need to prepare for a cyberattack were themes at the National Academies’ conference on grid security.

Much work remains to be done to ensure consistent adherence to supply chain standards, NERC said.

FERC and NERC are reviewing the more than 70 comments filed in response to their proposal on disclosure of CIP violations to determine their next steps.