The security of the electrical grid is no longer only a question of physical infrastructure. As power systems become increasingly digital, connected, and dependent on sophisticated industrial control technologies, cybersecurity has become an essential part of national infrastructure protection.
A new U.S. executive order highlights this growing concern by declaring a national emergency related to vulnerabilities associated with foreign-supplied equipment used in the bulk-power system. The order is designed to address risks such as unauthorized access, sabotage, malicious remote activity, and disruption of critical electricity infrastructure.
The development is significant because modern electricity infrastructure relies heavily on digital technologies. Equipment such as transformers, grid-connected inverters, energy storage systems, industrial control systems, programmable logic controllers, remote terminal units, protective systems, and related software can all play an important role in maintaining reliable power operations.
The Cybersecurity Risk Behind the Supply Chain
A major lesson from this development is that cybersecurity risks can enter an organization long before a device is connected to a network.
Hardware, firmware, software, maintenance mechanisms, remote access capabilities, and third-party services can all introduce security dependencies.
If those dependencies are not properly evaluated, organizations may face risks including:
• Unauthorized remote access
• Hidden or undocumented functionality
• Compromised firmware or software
• Supply chain manipulation
• Industrial control system compromise
• Operational disruption
• Loss of visibility into critical equipment
• Difficulty replacing vulnerable infrastructure
• Potential impact on public safety and essential services
The executive order specifically recognizes that risks can extend beyond physical equipment to associated software, firmware, digital capabilities, remote access mechanisms, and other supply chain dependencies.
Why Industrial Control Systems Require Special Attention
Industrial Control Systems are fundamentally different from conventional enterprise IT environments.
In a traditional IT environment, an organization may be able to isolate a compromised endpoint, rebuild a server, or temporarily shut down an application.
In critical infrastructure, those actions can be much more complicated.
Power generation and transmission systems are expected to operate continuously. Security decisions must therefore consider reliability, safety, availability of replacement equipment, and continuity of essential services.
The executive order gives federal authorities the ability to impose security conditions on certain equipment already installed, including requirements to identify, isolate, monitor, secure, disconnect, replace, or remove equipment when necessary.
This creates an important cybersecurity principle:
Critical infrastructure security must balance cybersecurity, operational technology safety, reliability, and business continuity.
The Growing Importance of Supply Chain Security
Organizations traditionally focused heavily on protecting their own networks.
That approach is no longer sufficient.
Modern infrastructure depends on complex ecosystems involving:
• Hardware manufacturers
• Software developers
• Equipment suppliers
• Maintenance providers
• Cloud and connectivity services
• Firmware providers
• Remote administration platforms
• System integrators
• Third-party contractors
A vulnerability anywhere within this ecosystem can potentially create risk for the broader environment.
For critical infrastructure operators, supplier security should therefore become part of the overall cybersecurity strategy rather than being treated solely as a procurement issue.
What Organizations Should Do Now
Organizations operating critical infrastructure should consider strengthening their security programs in several areas.
1. Conduct Supply Chain Risk Assessments
Organizations should evaluate vendors, manufacturers, components, firmware, software, remote access mechanisms, and maintenance dependencies before equipment is deployed.
2. Maintain Complete Asset Visibility
Security teams should know exactly what equipment exists within their operational environment, what software and firmware it uses, how it communicates, and who can remotely access it.
3. Secure Remote Access
Remote administration capabilities should be tightly controlled through strong authentication, least-privilege access, network segmentation, monitoring, and continuous review.
4. Monitor Industrial Networks
Continuous monitoring can help identify unusual communication patterns, unauthorized connections, configuration changes, and suspicious activity affecting operational technology environments.
5. Segment IT and OT Environments
Strong separation between corporate IT networks and operational technology environments can reduce the potential impact of a compromised enterprise system reaching critical industrial systems.
6. Assess Firmware and Software Security
Organizations should establish processes for validating firmware, tracking versions, evaluating vulnerabilities, and ensuring that security updates are obtained through trusted channels.
7. Prepare for Equipment Replacement
Critical infrastructure operators should have contingency plans for replacing equipment that is later determined to present unacceptable cybersecurity or national security risks.
Industries Facing Similar Risks
The concerns highlighted by this development extend beyond electric utilities.
Organizations operating or supporting critical infrastructure should consider similar supply chain and operational technology risks.
This includes:
• Energy and utilities
• Manufacturing
• Oil and gas
• Transportation and logistics
• Telecommunications
• Water and wastewater
• Healthcare infrastructure
• Defense and aerospace
• Data center operators
• Government agencies
• Critical technology providers
For these organizations, cybersecurity must extend beyond applications and endpoints to the physical systems that support essential operations.
Cybersecurity and Compliance Must Work Together
Regulatory compliance can provide an important foundation for managing critical infrastructure risk, but compliance alone does not guarantee security.
Organizations need practical security controls that address real operational risks.
This includes asset management, vendor risk assessments, vulnerability management, access control, network segmentation, continuous monitoring, incident response, penetration testing, security assessments, and documented recovery procedures.
Security frameworks and regulatory requirements can help organizations establish accountability and demonstrate due diligence, while technical testing and monitoring help determine whether those controls actually work.
The Bigger Picture
The latest policy action demonstrates how cybersecurity, national security, supply chain resilience, and critical infrastructure are becoming increasingly interconnected.
The power grid supports virtually every major sector of the economy. Financial institutions, hospitals, manufacturing facilities, transportation systems, communications networks, government services, and data centers all depend on reliable electricity.
A cyberattack or supply chain compromise affecting power infrastructure could therefore create consequences far beyond the original target.
The key lesson for organizations is clear:
Cybersecurity needs to begin before technology enters the environment.
Security teams must understand where equipment comes from, how it is developed, what software and firmware it contains, who can access it remotely, how it communicates, and how it can be monitored throughout its lifecycle.
Conclusion
The U.S. focus on foreign-supplied bulk-power equipment highlights a broader cybersecurity reality: supply chain security is now an essential component of critical infrastructure protection.
Organizations cannot rely solely on perimeter security or traditional network defenses. They need visibility across hardware, software, firmware, vendors, remote access mechanisms, and operational technology environments.
For energy providers and other critical infrastructure organizations, proactive supply chain assessments, OT security monitoring, secure remote access, vulnerability management, and incident response planning can significantly strengthen resilience.
As digital transformation and AI adoption continue increasing dependence on reliable infrastructure, protecting the systems behind that infrastructure will become even more important.
About COE Security
COE Security partners with organizations in financial services, healthcare, retail, manufacturing, and government to secure AI-powered systems and ensure compliance.
Our offerings include:
• AI-enhanced threat detection and real-time monitoring
• Data governance aligned with GDPR, HIPAA, and PCI DSS
• Secure model validation to guard against adversarial attacks
• Customized training to embed AI security best practices
• Penetration Testing (Mobile, Web, AI, Product, IoT, Network & Cloud)
• Secure Software Development Consulting (SSDLC)
• Customized CyberSecurity Services
For organizations operating in energy, utilities, manufacturing, telecommunications, transportation, healthcare, government, and other critical infrastructure sectors, COE Security can help strengthen cybersecurity across IT, OT, connected devices, software, cloud environments, and third-party ecosystems.
Our cybersecurity services can support organizations with supply chain security assessments, OT and ICS security assessments, vulnerability management, penetration testing, network security assessments, remote access security reviews, vendor risk assessments, cloud security, threat monitoring, incident response planning, and compliance-focused security programs.
We help organizations identify security gaps, reduce operational risk, improve visibility across technology environments, and develop security strategies aligned with their business and regulatory requirements.
Follow COE Security on LinkedIn for ongoing insights into safe, compliant AI adoption, critical infrastructure security, cybersecurity threats, and emerging technology risks.
Click to read our LinkedIn feature article