Foreign Threats to the Grid: A Questionable Solution in Search of a Problem

The Trump administration’s executive order declaring a national emergency over foreign-made equipment in the US energy grid has been met with confusion and concern from experts. On its surface, the move appears to be a reasonable response to legitimate security threats. However, upon closer examination, it reveals complex motivations and implications that warrant scrutiny.

The executive order relies on an “unusual and extraordinary foreign threat” as justification for restricting foreign-made equipment. This phrase has become a staple in Trump administration rhetoric, often used to justify executive overreach. It raises questions about the true nature of security risks being cited: actual vulnerabilities or perceived threats that may not exist?

A recent controversy surrounding Chinese-made solar power inverters containing undisclosed communication devices is relevant here. The Federal Communications Commission banned new foreign-made power inverters designed with remote communication capabilities, citing a lack of evidence linking these devices to actual security risks.

The Trump administration’s efforts to address potential foreign security threats against the grid are laudable, but this executive order may be more about sending a message than addressing the issue. By restricting the purchase and installation of certain foreign-produced equipment, the government is creating new bureaucratic hurdles for utility companies to navigate.

The 120-day deadline for the Department of Energy to publish formal rules implementing the policy will put pressure on utilities to compile an inventory list of affected equipment. However, as John Bruggeman, virtual chief information security officer at CBTS, pointed out, this is only the first step in a much longer process. Knowing what’s already running is where the real work starts.

The move raises questions about the potential economic impact on US companies that rely on foreign-made equipment. Will they be forced to absorb the costs of replacing existing systems or will the government provide financial assistance? The executive order’s failure to address these practical concerns adds to the sense of uncertainty surrounding its implementation.

Giving operators scalable, independent visibility into which assets and vendor relationships present the greatest risk without disrupting power system reliability is a daunting task. This requires not just technical expertise but also a deep understanding of the complex interplay between different systems and stakeholders. As Michael Centrella at SecurityScorecard noted.

The Trump administration’s executive order may be seen as a necessary response to perceived security threats, but it remains to be seen whether it will actually address the issue or simply create new problems for utilities and US companies to navigate. Utility companies must now compile inventory lists and policymakers must grapple with unintended consequences. The real work starts now.

In an era where cybersecurity threats are increasingly sophisticated and interconnected, policy responses must be informed by a nuanced understanding of complex issues at play. The Trump administration’s approach to addressing foreign security threats against the grid may be well-intentioned but ultimately falls short of providing a clear and effective solution.