National

Foreign enemies are increasingly launching cyberattacks on U.S. critical infrastructure, including energy facilities. To protect against attacks that could compromise electric service, grid operators must comply with mandatory standards overseen by the Federal Energy Regulatory Commission (FERC).

Yes, but: The U.S. has no comparable standards for its network of pipelines. As abundant and affordable natural gas has become a major part of the fuel mix, the cybersecurity threats to that supply have taken on new urgency.

The big picture: FERC has the authority to issue certificates for new interstate gas pipelines and to set their rates, but not to regulate their security. That charge falls to the Transportation Security Administration (TSA), the same agency that oversees 851 million aviation passengers per year, 138,000 miles of railroad track and 4 million miles of highway.

In May 2017, TSA confirmed that it had just 6 full-time employees tasked with securing the more than 2.7 million miles of natural gas, oil and hazardous liquid pipelines that traverse the country. Moreover, despite having the authority to enforce mandatory cybersecurity standards, the TSA relies on voluntary ones.

Given the high stakes, Congress should vest responsibility for pipeline security with an agency that fully comprehends the energy sector and has sufficient resources to address this growing threat. The Department of Energy (DOE) could be an appropriate choice: It is the Sector-Specific Agency for energy security and recently created its own cybersecurity office.

The ultimate regulator must have the statutory authority, resources and commitment to implement mandatory standards, as FERC has done for the electric grid for more than a decade. While the electric sector presents different operational risks, the essential starting point for these reforms is standards that are both mandatory and tailored to the pipeline network's greatest threats.

The bottom line: U.S. energy consumers depend on the electric grid. Its safety and security demand smart, effective, and up-to-date threat protections.

Neil Chatterjee and Richard Glick are both Commissioners at the FERC.

Cybersecurity threats to U.S. gas pipelines call for stricter oversight

Mandatory cybersecurity standards — and a regulator to enforce them — are vital.

natural gas pipeline crossing mountain valley

A natural gas pipeline in Colorado. Photo: Jerry Cleveland/The Denver Post via Getty Images

Energy

Pipeline transport

Expert Voices

Politics

Oil companies

Cybersecurity

Foreign enemies are increasingly <a class="gtmContentClick" data-vars-link-text="launching cyberattacks" data-vars-click-url="https://www.axios.com/us-says-russias-cyber-war-targeted-the-grid-1521201831-c991b289-fe65-4ad2-b240-0b759bbc3c50.html" data-vars-content-id="09fac6e5-da94-491e-9523-d08ef15237f4" data-vars-headline="Cybersecurity threats to U.S. gas pipelines call for stricter oversight" data-vars-event-category="story" data-vars-sub-category="story" data-vars-item="in_content_link" href="https://www.axios.com/us-says-russias-cyber-war-targeted-the-grid-1521201831-c991b289-fe65-4ad2-b240-0b759bbc3c50.html" target="_self">launching cyberattacks</a> on U.S. critical infrastructure, including energy facilities. To protect against attacks that could compromise electric service, grid operators must comply with mandatory standards overseen by the Federal Energy Regulatory Commission (FERC).Yes, but: The U.S. has no comparable standards for its network of pipelines. As abundant and affordable natural gas has become a major part of the fuel mix, the cybersecurity threats to that supply have taken on new urgency.

Ominous forecasts about the impact of climate change serve as the backdrop for the world — led by U.S. lawmakers and companies — to debate big action on the problem, which could upend energy systems and our way of life.

Neil Chatterjee

Stories

Cybersecurity threats to U.S. gas pipelines call for stricter oversight