FERC still weighing $10 million cybersecurity violation fine, push to reveal its target

摘要

The Federal Energy Regulatory Commission has again extended itsdeadline for considering whether to review on its own a slew ofsystemic security issues at a utility that led to 127 alleged violations ofcritical infrastructure protection standards.The North American Electric Reliability Corp. notified FERC of thealleged violations that “collectively posed a serious risk” to grid securityand reliability in a penalty notice (NP19-4) filed January 25. The noticesought FERC approval of a settlement NERC brokered with the companythat would levy a record $10 million fine and set out other conditions.The company at issue goes unidentified in the redacted publicnotice, but media reports later outed that entity as Duke Energy.