The U.S. energy sector operates the most robust and reliable energy infrastructure in the world. This level of reliability is made possible by the extensive use of SCADA, DCS, and other control systems that enable automated control of energy production and distribution. These systems integrate a variety of distributed electronic devices and networks to help monitor and control energy flows in the electric grid and oil and gas infrastructure.

Automated control has helped to improve the productivity, flexibility, and reliability of energy systems. However, energy control systems communicate with a multitude of physically dispersed devices and various information systems that can expose energy systems to malicious cyber attacks. A successful cyber attack could compromise control systems and disrupt energy networks and the critical sectors that depend on them.

Securing control systems is a key element in protecting the Nation's energy infrastructure. The National Research Council identified "protecting energy distribution services by improving the security of SCADA systems" as one of the 14 most important technical initiatives for making the nation safer across all critical infrastructures. In addition, the National Strategy to Secure Cyberspace (February 2003) (PDF 980 KB) states that "securing DCS/SCADA is a national priority".

Federal policy development and independent studies both call for improvements in control systems security as a critical part of infrastructure protection.

Federal Policy Development for Critical Infrastructure Protection

• National Strategy for Homeland Security (July 2002) (PDF 2.5 MB)
• Homeland Security Act of 2002 (November 2002) (PDF 1.0 MB)
• National Strategy for the Physical Protection of Critical Infrastructures and Key Assets (February 2003) (PDF 1.3 MB)
• National Strategy to Secure Cyberspace (February 2003) (PDF 980 KB)
• Homeland Security Presidential Directive 7 (December 2003) (PDF 176 KB)

Studies Calling For Improved Security of Energy SCADA/DCS

• Preliminary Research and Development Roadmap for Protecting and Assuring the Energy Infrastructure, Transition Office of the President's Commission on Critical Infrastructure Protection (TOPCCIP) (July 1998). (PDF 286 KB)
• An Approach to Action for the Electricity Sector, North American Electric Reliability Council (June 2001). (PDF 1.5 MB)
• Securing Oil and Natural Gas Infrastructures in the New Economy, National Petroleum Council (June 2001). (PDF 1.6 MB)
• The Electricity Sector Response to the Critical Infrastructure Protection Challenge, North American Electric Reliability Council (May 2002). (PDF 189 KB)
• Making the Nation Safer, The Role of Science and Technology in Countering Terrorism, National Research Council (June 2002). (PDF 8.4 MB)
• Critical Infrastructure Protection: Challenges and Efforts to Secure Control Systems, U.S. Government Accounting Office (March 2004). (PDF 543 KB)
• Technology Assessment: Cybersecurity for Infrastructure Protection, U.S. Government Accounting Office (May 2004). (PDF 1.9 MB)