A Regulatory Framework for Cybersecurity in Energy: the US Experience │Thomas Pearce (NARUC)

Nicolò Rossetto (FSR) and Thomas Pearce (NARUC) discuss the issue of cybersecurity in the energy sector. Cybersecurity is attracting growing interest from companies and regulators around the world, largely because the associated costs are increasing and becoming more visible. Special attention from the regulators is then necessary. In the US, the 50 state jurisdictions plus the District of Columbia are putting in place different approaches, while sharing the same goal of enhanced cybersecurity protection for the utility systems they regulate. The differences in their approach often stem from each state’s varying regulatory framework: some have vertically integrated utilities, while others introduced unbundling and competition. Furthermore, some states have made more progress, while others are still defining their policy and looking for the best practices around the country. Indeed, both Europe and the US could learn from each other by sharing early experiences and reflections on an issue that is becoming increasingly relevant in the energy sector.