FERC ordered expanded reporting of cybersecurity incidents, saying attempts not currently reported could lead to bigger, more successful attacks.

FERC approved rules to prevent malware from infecting “low impact” computer systems through devices such as laptops and thumb drives.