Managing cyber risk in the electric power sector

The network of power plants and lines connecting to homes and businesses is widely considered to be among the most critical infrastructure in the world, especially in advanced economies. It’s also one of the most frequently attacked, with consequences that could potentially reach far beyond the power sector.

This report examines the growing sources of cyber risk in the power sector, tracks the evolving threats, threat actors, and susceptibilities, and explores one of the most prominent vulnerabilities today—cyber risk in the electric power supply chain. It also explores the nature of supply chain cyber risk, delves into recent supply chain attacks and their impact on the power sector, and discusses challenges in addressing these risks.