Office of Cybersecurity, Energy Security, and Emergency Response

Office of Cybersecurity, Energy Security, and Emergency Response
Name	Office of Cybersecurity, Energy Security, and Emergency Response
Type	Office
Formed	2018
Jurisdiction	United States Department of Energy
Headquarters	Washington, D.C.
Parent agency	United States Department of Energy

Office of Cybersecurity, Energy Security, and Emergency Response is an office within the United States Department of Energy focused on protecting the United States electric grid, energy infrastructure, and related critical infrastructure from cyber and physical threats while coordinating responses to energy emergencies. It operates at the intersection of federal policy, technical operations, and emergency management, engaging with federal entities such as the Department of Homeland Security, Federal Energy Regulatory Commission, and National Protection and Programs Directorate as well as state authorities like the California Energy Commission and New York State Energy Research and Development Authority. The office informs resilience strategies that touch North American Electric Reliability Corporation, Federal Emergency Management Agency, Department of Defense, Office of the Director of National Intelligence, and private sector operators including Exelon, Duke Energy, and Pacific Gas and Electric Company.

History

The office was created amid heightened concern following cyber incidents such as the 2015 Ukraine power grid cyberattack, the 2017 NotPetya attack, and high-profile outages like the 2019 Venezuelan blackouts that underscored interdependencies between digital systems and physical energy infrastructure. It evolved alongside policy developments including the Cybersecurity Information Sharing Act of 2015, the National Infrastructure Protection Plan, and directives from administrations that worked with organizations like North American Electric Reliability Corporation and Electric Power Research Institute. Early coordination involved stakeholders such as Sandia National Laboratories, Lawrence Berkeley National Laboratory, Oak Ridge National Laboratory, and Argonne National Laboratory to translate research into operational guidance.

Mission and Responsibilities

The office’s mission centers on safeguarding energy security through prevention, protection, and response. Responsibilities include incident response coordination with Federal Energy Regulatory Commission, threat reporting consistent with Homeland Security Presidential Directive-7 frameworks, technical assistance to utilities like Consolidated Edison and Southern Company, and policy development in cooperation with Office of Management and Budget and National Security Council. It issues operational products that align with standards from Institute of Electrical and Electronics Engineers, International Electrotechnical Commission, and supports compliance discussions involving North American Electric Reliability Corporation standards and state public utility commissions such as the Texas Public Utility Commission.

Organizational Structure

The office is organized into teams addressing cybersecurity, energy security, emergency response, and program management, interfacing with DOE principal offices including Office of Electricity and Office of Energy Efficiency and Renewable Energy. Leadership typically coordinates with federal counterparts in Department of Homeland Security, FEMA, and Cybersecurity and Infrastructure Security Agency while leveraging national laboratory partnerships with Idaho National Laboratory and Brookhaven National Laboratory. The structure enables liaison roles for regional organizations like New England ISO, PJM Interconnection, and California Independent System Operator to maintain situational awareness and operational continuity.

Programs and Initiatives

Programs encompass proactive vulnerability assessments, tabletop exercises, and technical guidance. Initiatives include information-sharing mechanisms akin to Information Sharing and Analysis Center models, pilot programs with utilities such as Con Edison and Salt River Project, and research collaborations with Massachusetts Institute of Technology, Stanford University, and Carnegie Mellon University. The office sponsors exercises similar to GridEx and maintains playbooks for incidents influenced by case studies like the Texas power crisis (2021), the Hurricane Maria energy response, and responses to threats described in analyses by RAND Corporation and the Center for Strategic and International Studies. It also advances work on operational technology security standards and resilience metrics that reference the National Institute of Standards and Technology frameworks and engages with international partners such as North Atlantic Treaty Organization members and agencies in United Kingdom, Canada, and Australia.

Notable Incidents and Responses

Notable engagements have included coordination during the 2021 Colonial Pipeline cyberattack, support during extreme weather events like Hurricane Ida and Hurricane Sandy, and response efforts tied to cascading failures examined in reports on the Northeast blackout of 2003. The office has issued advisories related to malware families linked to state actors identified in United States Cyber Command notices and has facilitated mutual assistance across utilities comparable to Mutual Assistance Groups used after Superstorm Sandy. It also played roles in recovery planning following the 2021 Texas power crisis and in sharing lessons from the 2015 Ukraine power grid cyberattack to harden grid operations.

Partnerships and Stakeholder Engagement

The office builds partnerships across industry, academia, state and local agencies, and international organizations. Regular engagement includes working groups with North American Electric Reliability Corporation, coordination with National Governors Association, and collaboration with trade groups such as the American Public Power Association and Edison Electric Institute. Academic partnerships involve institutions like University of California, Berkeley, Georgia Institute of Technology, and Princeton University for applied research, while federal collaboration extends to Department of Defense and Intelligence Community interfaces. Municipal and utility stakeholders including Municipal Electric Utilities of Wisconsin and investor-owned utilities participate in outreach, resilience exercises, and information-sharing designed to align operational practices with standards from National Institute of Standards and Technology and peer organizations in Canada and United Kingdom.

Category:United States Department of Energy