Critical infrastructure cyber security legislation

May 4, 2009
The question is no longer will there be cyber security legislation for the critical infrastructures. Rather, it is what will the legislation entail. As of last week, there are at least three cyber security bills explicitly addressing critical infrastructure. Two of the bills specifically deal with cyber security of the electric grid. Over the next few days, I will do a technical comparison between the two electric grid bills – one from Homeland Security and one from Energy and Commerce.  I will not attempt to address policy issues such as what committee should have jurisdiction.
The question is no longer will there be cyber security legislation for the critical infrastructures. Rather, it is what will the legislation entail. As of last week, there are at least three cyber security bills explicitly addressing critical infrastructure. Two of the bills specifically deal with cyber security of the electric grid. Over the next few days, I will do a technical comparison between the two electric grid bills – one from Homeland Security and one from Energy and Commerce.  I will not attempt to address policy issues such as what committee should have jurisdiction. What should be noted is that either of these bills can have a great impact on on-going industry efforts such as the NERC CIP redrafting efforts and the Smart Grid security efforts. Joe Weiss