Friday, June 1, 2018

FERC Agrees to $2.7m Fine over ‘Serious’ Cyber Violations (Politico Morning Energy)


(WASHINGTON, DC) -- FERC has finalized the fine against a company for violating cybersecurity rules that the North American Electric Reliability Corp. said “posed a serious and substantial risk to the reliability” of the electric grid. The violations were outlined in a filing with FERC earlier this year, and regulators have agreed to uphold the settlement worked out between the Western Electricity Coordinating Council and the unnamed firm.

The firm, which is labeled only as “Unidentified Registered Entity,” neither admitted nor denied the violations but agreed to the fine as well as other sanctions.

FERC mulled conducting its own review of the violations but ultimately accepted NERC’s resolution this week. It’s NERC’s policy to not release the names of organizations or companies involved in security violations for fear that the information might be used to exploit a vulnerability.