By Hudson Sangree
Threats from the COVID-19 coronavirus and computer viruses occupied much of the discussion at the Western Electricity Coordinating Council Board of Directors meeting Wednesday, which could be the last in-person gathering the regional entity holds while the pandemic plays out.
CEO Melanie Frye said WECC would hold only webinars and teleconferences going forward to protect staff and stakeholders, in keeping with the Level 2 Alert issued by NERC on Tuesday. The situation will be reassessed every two weeks, she said. (See NYISO, MISO Join Operators in Suspending In-person Meetings.)
The alert advised registered entities to maintain situational awareness, reinforce good personal hygiene practices and review and update business continuity plans. It also advised of possible supply chain disruptions that could affect the availability of electronics, personal protective equipment and sanitation supplies.
NERC CEO Jim Robb, the former CEO of WECC, returned to his former workplace in Salt Lake City and talked about ongoing efforts to guard utilities against cyberthreats from “persistent, determined adversaries” abroad. Working with federal agencies, NERC has been developing computer programs to spot “untoward internet traffic” from nations such as Iran, North Korea and the Netherlands, a hub for hackers, he said.
Robb’s comments came a day after NERC warned the electric industry to “anticipate and prepare for coronavirus-themed opportunistic social engineering attacks.”
“Spearphishing, watering hole and other disinformation tactics are commonly used to exploit public interest in significant events,” NERC wrote in its alert. “Take steps to ensure continued visibility and maintenance of cyber assets in the event of staffing disruptions.”
NERC has been working with industry to provide advice and information about the coronavirus, including publishing a document titled “Assessing and Mitigating the Novel Coronavirus (COVID-19)” on the Electricity Subsector Coordinating Council’s website.
In her presentation, Frye said WECC had decided to cancel its Reliability and Security Workshop in Portland, Ore., scheduled for March 24-26. Instead, the RE plans to offer a free one-day webinar on March 24 to discuss the most important topics from the workshop. Frye said it will issue refunds to those who have already registered and paid.
NERC’s Level 2 Alert requires a wide range of electric industry entities to report back to NERC by March 20 on preparedness for a pandemic.
“It’s a really good step from the ERO Enterprise perspective to just make sure we’re coordinating with industry and getting the information that we need to assure [that] in the event we have a shortage of workforce — if a large population is quarantined or ill or needing to take care of people who are ill — how would we run our business?” Frye said. “And then also thinking through the impact on supply chain — what if we’re not able to get the equipment that we need, etc.?”
WECC’s executive team has been updating the ERO’s business continuity plans and preparing “in the event that we need to take steps here at WECC, such as remote work and things of that nature,” Frye said. “One of the issues that we will face —and I think many organizations are probably finding this — telework is a great idea, but do we have the IT bandwidth and resources to support that?”
WECC managers planned to meet Thursday to discuss their options, she said. “There are some steps we’re thinking through now in anticipation of something maybe bigger,” Frye said.