Electricity Information Sharing and Analysis Center

Electricity Information Sharing and Analysis Center
Name	Electricity Information Sharing and Analysis Center
Formation	1999
Type	Information sharing and analysis center
Purpose	Cybersecurity and physical security coordination for the electric sector
Headquarters	United States
Region served	North America
Membership	Utilities, grid operators, vendors, regulators

Electricity Information Sharing and Analysis Center is a sector-specific information sharing and analysis center serving the electric power industry in North America, coordinating threat intelligence, vulnerability notification, and incident response among utilities, vendors, and regulators. Founded in the late 1990s amid concerns following major outages and cyber incidents, it works closely with federal agencies, regional transmission organizations, and international counterparts to enhance resilience of bulk power systems. The center operates at the intersection of North American Electric Reliability Corporation, Federal Energy Regulatory Commission, and multiple industry stakeholders to disseminate indicators, alerts, and best practices.

Overview

The center was established as part of a broader movement including Financial Services Information Sharing and Analysis Center, Aviation ISAC, and Maritime Transportation System ISAC to provide sector-tailored threat sharing after events like the Northeast blackout of 2003 and outages involving California Independent System Operator. Its mandate aligns with initiatives such as Homeland Security Presidential Directive 7 and coordination with agencies like Department of Homeland Security and Cybersecurity and Infrastructure Security Agency. The center aggregates threat intelligence from sources including National Cybersecurity and Communications Integration Center, United States Computer Emergency Readiness Team, North American Electric Reliability Corporation Critical Infrastructure Protection, and vendors like Schneider Electric, Siemens, and General Electric. It supplements industry forums like Edison Electric Institute, American Public Power Association, and National Rural Electric Cooperative Association.

Organization and Governance

Governance incorporates representation from investor-owned utilities such as Duke Energy, NextEra Energy, and Southern Company, alongside municipal utilities like Los Angeles Department of Water and Power and cooperatives including Tri-State Generation and Transmission Association. The board includes stakeholders from transmission operators like PJM Interconnection, Midcontinent Independent System Operator, California Independent System Operator, and New York Independent System Operator. Oversight interacts with regulatory bodies including Federal Energy Regulatory Commission and regional reliability organizations like Western Electricity Coordinating Council and Texas Reliability Entity. Legal and policy counsel frequently involves law firms and standards bodies such as Institute of Electrical and Electronics Engineers, International Electrotechnical Commission, and National Institute of Standards and Technology.

Functions and Services

Services include dissemination of actionable cyber indicators, coordination of physical security alerts, and publication of technical advisories drawing on sources like MITRE ATT&CK, Common Vulnerabilities and Exposures, and Industrial Control Systems Cyber Emergency Response Team. It provides secure platforms for information exchange similar to systems used by Financial Services Information Sharing and Analysis Center and operational playbooks used by Federal Energy Regulatory Commission investigations. Analytical products leverage data from vendors including ABB, Honeywell, Emerson Electric, and researchers from Carnegie Mellon University, Massachusetts Institute of Technology, and SANS Institute. Training programs align with curricula from North American Transmission Forum and certification interests involving (ISC)² and ISACA.

Membership and Participation

Membership spans investor-owned utilities, municipal systems, rural electric cooperatives, independent power producers like Exelon and Entergy, and equipment manufacturers. Participation tiers accommodate companies such as American Electric Power, Consolidated Edison, Public Service Enterprise Group, and vendors like Rockwell Automation and Schweitzer Engineering Laboratories. Affiliates include regional reliability councils, independent system operators, and academic partners such as University of Texas at Austin and University of Illinois Urbana-Champaign. Government liaison roles connect with Department of Energy, Federal Bureau of Investigation, and regional fusion centers.

Collaboration and Partnerships

The center partners with international counterparts including European Union Agency for Cybersecurity, United Kingdom National Cyber Security Centre, and Canada's Canadian Centre for Cyber Security to exchange cross-border intelligence affecting interconnected grids. It engages with standards and industry groups such as IEEE Power & Energy Society, International Electrotechnical Commission, Energy Sector Control Systems Working Group, and Open Group. Collaborative exercises have involved North Atlantic Treaty Organization standards for critical infrastructure protection and tabletop scenarios coordinated with National Governors Association and Council of European Energy Regulators.

Incidents, Threats and Response

The center compiles lessons from incidents involving malware campaigns like BlackEnergy, Industroyer, and NotPetya, and coordinates responses to physical sabotage events and natural disasters including Hurricane Sandy and the Great Northeast Blackout. It issues alerts when vulnerabilities affect equipment from manufacturers such as Siemens and Schneider Electric and supports joint response efforts with United States Computer Emergency Readiness Team, Federal Bureau of Investigation, and regional reliability organizations. Post-incident analyses reference case studies from Yorktown Power Plant disruptions, supply chain compromises similar to SolarWinds, and coordinated resilience planning with National Infrastructure Advisory Council.

Policy, Standards and Compliance

Activities intersect with regulatory frameworks including standards from North American Electric Reliability Corporation Critical Infrastructure Protection and mandates enforced by Federal Energy Regulatory Commission Order No. 706 and subsequent orders. The center helps members align with guidance from National Institute of Standards and Technology Special Publication 800-82, International Organization for Standardization standards, and best practices promulgated by Electric Power Research Institute. Compliance support includes audits, tabletop exercises, and evidence sharing for enforcement actions coordinated with Federal Energy Regulatory Commission and state public utility commissions such as California Public Utilities Commission and New York Public Service Commission.

Category:Information sharing and analysis centers