CISA Publishes Guide for AI Critical Infrastructure Integration

To help critical infrastructure owners address the “opportunity and risk” of artificial intelligence, the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency, along with the FBI and several overseas counterparts, released guidance for incorporating AI into operational technology systems.

CISA and the FBI developed the Principles for the Secure Integration of AI in OT document in collaboration with the National Security Agency’s AI Security Center, as well as security centers representing Canada, Germany, New Zealand, the United Kingdom and the Netherlands.

OT consists of hardware and software that interact with the physical environment, or manage devices that do so, according to the National Institute of Standards and Technology. They include industrial control systems, building management systems, fire control systems and physical access control systems.

The agencies wrote in an alert that while AI promises multiple benefits for OT environments, such as “increased efficiency, enhanced decision-making and cost savings,” it also poses “unique risks” for safety, security and reliability. The document focuses on machine learning, large language models and AI agents, but the authors wrote it also can be applied to “systems using traditional statistical modeling and logic-based automation.”

“While AI can enhance the performance of OT systems that power vital public services, it also introduces new avenues for adversarial threats,” Nick Andersen, CISA’s executive assistant director for cybersecurity, said in a news release. “That’s why CISA, in close coordination with our U.S. and international partners, is committed to providing clear, actionable guidance. We strongly encourage OT owners and operators to apply the principles in this joint guide to ensure AI is implemented safely, securely and responsibly.”

The guidance is organized into four key principles:

    • understanding the risks and impacts of AI in OT environments, the importance of educating personnel on these risks, and the secure AI development lifecycle;
    • considering the business cases for integrating AI into OT spaces, its short- and long-term challenges, and the role of vendors;
    • establishing governance mechanisms and testing procedures for AI models; and
    • embedding oversight mechanisms to ensure safe operation and cybersecurity of AI-enabled OT systems.

Risks posed by AI include the potential for manipulation of data, models and deployment software that causes incorrect outcomes or bypasses security and physical safety guardrails. Even without external manipulation, the authors observed that “AI models can only be as effective as the quality of their training data.” Collecting high-quality sensor data for the AI program can be difficult in distributed OT environments, they wrote, while centralizing operational data can create a target for cyber threat actors.

AI models also can become less accurate over time, the authors continued, as data is introduced that is not part of its initial training set. In addition, operators may have trouble understanding a model’s decision-making process, making it hard to diagnose and correct errors. Finally, operators may miss crucial information if they become too reliant on AI to manage their systems.

Regarding the business case for AI, the agencies recommended that infrastructure owners and operators determine whether AI is the most appropriate solution for their needs and requirements. This assessment should include security, performance, complexity, cost and effects on physical safety of the OT environment, along with the organization’s capacity for maintaining an AI system compared to established technologies.

OT vendors “play a crucial role in advancing AI integration,” the authors continued, writing that “some OT devices now come with built-in AI technology, which may require internet connectivity to function.” Operators “should demand transparency and security considerations” from vendors regarding their use of AI and connectivity, with contractual guarantees of open communication.

Governance mechanisms for AI should outline clear roles for leadership, OT and information technology subject matter experts, and cybersecurity teams. They also should provide data governance policies, audits and compliance testing to validate and verify performance.

“AI holds tremendous promise for enhancing the performance and resilience of operational technology environments — but that promise must be matched with vigilance,” CISA acting Director Madhu Gottumukkala wrote. “OT systems are the backbone of our nation’s critical infrastructure, and integrating AI into these environments demands a thoughtful, risk-informed approach. This guidance equips organizations with actionable principles that AI adoption strengthens, not compromises, the safety, security and reliability of essential services.”

U.S. Solicitor General Sides Against Duke Energy in Antitrust Case

The Supreme Court should reject an appeal from Duke Energy of an antitrust case it lost in lower courts, the Office of the Solicitor General said in a brief filed Dec. 1 (24-917).

The 4th U.S. Circuit Court of Appeals found in August 2024 that Duke’s alleged anticompetitive conduct against NTE Energy — an independent power producer serving municipal customers in North Carolina — warranted another look in a lower court, which sided with the other parties. Duke filed a petition for review at the Supreme Court in February. (See 4th Circuit Remands Duke Energy Market Power Lawsuit Filed by NTE.)

“This appeal arises out of a campaign by an established monopolist to stop a more efficient rival from disturbing its long-dominant hold over a regional energy market,” OSG said.

The beneficiary of a government grant of a monopoly more than a century ago, Duke has controlled the wholesale power market in the Carolinas for decades. Barriers to entry — including the high cost of power plants and the paucity of anchor clients big enough to help finance a competitor’s generator — have helped it keep that monopoly.

“By dissuading such customers from switching to a potential competitor, an entrenched monopolist can prevent new entrants from gaining a foothold in the region — without creating a better product, producing a better service or implementing a general price cut,” OSG said. “The summary-judgment record would support a finding that that is exactly what happened here.”

Duke’s old power plants were not competitive with NTE’s, which used newer technology to produce electricity at a cheaper rate, so when the IPP tried to build one in in the Carolinas, Duke targeted the competition itself, OSG argued.

“Petitioner recognized that this new plant would be viable only if respondent could sell power to the city of Fayetteville, the one sizable customer in the area whose contract was coming due,” OSG said. “Petitioner therefore took a variety of steps intended to deter Fayetteville from switching to a new supplier.”

Duke has not sought review of the underlying facts of the case, in which the 4th Circuit found that the various acts it took added up to what a jury could find to be an anticompetitive campaign, OSG noted.

“When a monopolist engages in a coordinated campaign to squelch competition, no circuit holds that each discrete aspect of the defendant’s conduct must be analyzed in isolation,” OSG said. “Instead, courts uniformly agree, consistent with this court’s precedent, that a holistic analysis is appropriate in circumstances like these. The petition for a writ of certiorari should be denied.”

Duke’s petition for the Supreme Court to review the case argues that, on their own, none of its actions were illegal, saying the 4th Circuit effectively found that “0+0=1.”

“The district court found that antitrust math is no different from ordinary arithmetic. If an antitrust plaintiff pleads a series of independently lawful acts, each of which does not violate this court’s precedents, those acts cannot together add up to some nebulous antitrust violation,” Duke said in its petition. “The Court of Appeals concluded otherwise, embracing a ‘monopoly broth’ theory prominent in the 1960s to 1980s but long since discarded.”

The Supreme Court needs to intervene to restore antitrust law to the principles that have governed in more recent decades, the company argued. It overhauled how to prove monopolization under the Sherman Act starting in the 1990s.

“It replaced open-ended standards and generalized questions of anticompetitive intent with clear rules for particular categories of conduct,” Duke said. “That doctrinal shift has provided much needed certainty for businesses and judges alike and has prevented antitrust law from chilling vigorous competition in the marketplace. Antitrust plaintiffs have long resisted that shift.”

The U.S. Chamber of Commerce, the NC Chamber Legal Institute and the Business Roundtable filed an amicus brief taking Duke’s side.

“In just a few short months, the decision below has already been cited dozens of times in briefs and decisions across the country as plaintiffs urge lower courts to disregard this court’s discrete doctrinal standards in favor of ‘holistic’ analyses,” they said.

Allowing the 4th Circuit’s finding to stand would supercharge that trend with antitrust plaintiffs filing allegations of “complex” anticompetitive schemes that cannot satisfy the court’s clear tests and would thus be “dead on arrival” in other circuits, they added.

West Needs Unified IBR Approach, WIRAB Says

Western state utility commissioners should encourage “standardization and harmonization” to effectively integrate inverter-based resources throughout the region, according to a guide developed by the Western Interconnection Regional Advisory Body and Elevate Energy Consulting.

The guide, a “technical resource” intended to assist commissioners, is a follow-up to a report on IBRs commissioned by WIRAB in 2024. Elevate Energy and WIRAB hosted a webinar to discuss the document and its findings Dec. 2.

The report notes that over the next decade, approximately 85% of new generation in the West is expected to be IBRs. If not integrated correctly, this can lead to vulnerabilities in modeling, coordination and operational performance, according to the report.

To correctly integrate IBRs, the industry must focus on “standardization and harmonization,” Ryan Quint, CEO of Elevate Energy, said during the webinar. “In particular, adopting the latest and greatest standards.”

FERC and NERC have said, ‘We strongly … encourage folks to adopt [IEEE 2800-2022], but we are not mandating it,’ meaning there are no requirements for [the] significant … amount of decisions that need to be made about how we want to configure, control and operate IBRs,” Quint said. “So, unless those requirements are specified, there are potential gaps that exist.”

Encouraging standard adoption of IBRs is especially tricky in the West because many entities are involved in the process, Quint noted.

Other regions may have one ISO or RTO where all the decisions are made with “one central entity responsible for administering that process and following those rules that have been created or imposing those rules,” Quint said.

“In the West, we’ve got dozens and dozens and dozens of planning coordinators, transmission planners, that all have varying sizes, areas of expertise, challenges of their own,” Quint said. “Regional coordination, bringing these entities together in a unified way, is really an important concept, particularly in the West. And that becomes very applicable with the adoption of new standards, the improvement of requirements, the checks and balances that happen during the interconnection process, etc.”

Standardization brings reliability benefits to not only transmission providers, but also developers and contractors, who will have a clearer understanding of the rules, Quint said.

To achieve harmonization, the industry needs a stakeholder-engaged assessment, which would include regional training, support for smaller entities and utility flexibility.

The need to streamline integration of IBRs also applies to large load interconnections, Quint noted.

The technical resource states that commissions “can set expectations, require transparency and ensure utilities are prepared to integrate IBRs without compromising affordability, reliability or resilience.”

The resource suggests seven key focus areas for IBR oversight:

    • enhanced and harmonized interconnection requirements,
    • IBR modeling, data quality and study processes,
    • using modern IBR capabilities,
    • commissioning practices and post-commissioning monitoring,
    • utility operational readiness,
    • coordination and sharing across jurisdictions, and
    • maximizing capabilities of legacy IBR devices.

Arizona Corporation Commissioner Lea Márquez Peterson, WIRAB’s chair, said the goal of the resource is to “equip regulators with clear, practical oversight tools and the kinds of questions that surface potential issues early, drive meaningful conversations with utilities and ultimately support better outcomes for the Western Interconnection as a whole.”

“NERC and FERC are strengthening standards, but regulatory oversight varies, and some responsibilities fall on our shoulders as commissioners,” Márquez Peterson said. “WIRAB’s role is to help bridge the space between complex technical issues and the regulatory decisions that shape reliability. This resource is one way we can support that mission.”

NYISO Monitor Says More Data Needed to Verify Out-of-market Actions

The NYISO Market Monitoring Unit cannot verify the need for out-of-market actions on the part of transmission owners for reliability, it told the Installed Capacity Working Group on Dec. 1.

This is because the tariff does not specifically grant the MMU the power to obtain the data necessary to verify such actions, said Pallas LeeVanSchaick, vice president at Potomac Economics, the MMU.

LeeVanSchaick included the analysis as part of a presentation of the third-quarter State of the Market report in response to stakeholder questions on the first-quarter report in August. (See NYISO Stakeholders Concerned About Lack of Data on Supplemental Commitments.)

The MMU is unable to verify whether all day-ahead reliability units and supplemental resource evaluation calls are scheduled because of actual reliability needs. These out-of-market actions actually became less frequent in New York City because of new 138-kV transmission, but 23% of them could not be verified.

LeeVanSchaick said that while the NYISO tariff gives the MMU broad access to data from “market parties” and “sellers,” TOs do not specifically qualify as either. This means the MMU is dependent on the data that TOs give to NYISO, which are frequently not detailed enough to verify reliability calls. He noted, however, that NYISO has begun to receive more detailed information on out-of-market commitments “in recent months.”

Multiple stakeholders expressed concern that the Monitor had “their hands tied” trying to get data from TOs. A TO representative said they had a unique responsibility for local reliability and that this had to be taken into consideration should any new regulations be developed.

Stakeholders and the MMU seemed open to discussing the issue further at upcoming meetings, which may create calls for tariff changes to address information gaps.

State of the Market

All-in prices ranged from $62/MWh in the North Country to $100/MWh in New York City, up 36 to 50% from last year. LeeVanSchaick said that this was primarily driven by natural gas price increases of 42 to 66%.

Additionally, NYISO became a net exporter of energy to Quebec for the first time in summer, averaging 480 MW. Canada’s exports to the ISO fell 1.4 GW year-over-year. July’s heat waves led load to peak at 30.6 GW, 6% higher than last year’s.

Congestion revenues rose 35% year-over-year, caused by transmission outages in Western New York and New York City. Long Island lines accounted for the largest share of congestion statewide, particularly on high-load days in July.

Over the summer, the Monitor identified an average of 2.2 GW of forced outages on high-load days, far higher than the anticipated 1.6 GW of market outages. During the most extreme heat waves, additional capacity was unavailable in real time because of the inability of generators to ramp, ambient heat and ambient humidity. In total these three factors removed 600 MW of capacity statewide. LeeVanSchaick said this “overstated significantly” the available capacity on the market.

Other Business

The ICAP Working Group also reviewed tariff revisions for the Improved Duct-Firing Modeling project and the NYISO/Hydro Quebec interconnection agreement.

It also discussed revisions to the aggregation manual for municipal electric utilities. NYISO staff said they believe a new section of the manual will need to be added to support the participation of distributed energy resources within municipal utility territories.

In addition, NYISO responded to stakeholder requests for information about how much generation had elected to be considered firm for the 2026/27 capability year. (See NYISO Business Issues Committee OKs Firm Fuel Accreditation Concept.)

In New York City, 7.6 GW of capacity elected as firm, representing 82% of capacity covered by the firm fuel option. On Long Island, 89% of capacity elected firm, totaling 4.6 GW. In the Capital District, which is the only area upstate modeled as being fuel constrained, 80% of eligible capacity totaling 2.8 GW elected firm.

CAISO Ponders DER Market Participation in New Paper

A new CAISO paper lays out a series of challenges around how to improve participation of demand response and distributed energy resources in the ISO’s day-ahead and real-time markets.

The paper, published Nov. 26, compiled information from CAISO Demand and Distributed Energy Market Integration (DDEMI) Working Group meetings held in 2025.

CAISO is committed to enabling “the reliable, efficient and seamless utilization of demand response into ISO operations and markets,” the ISO said in the paper.

Under the ISO’s current rules, distributed energy resource (DER) aggregations and resources that can reduce their load are able to participate in the day-ahead and real-time markets for energy and ancillary services.

The DDEMI Working Group developed “problem statements” for the ISO to consider as it begins work in early 2026 to expand DER and DR access to its markets. The group identified six topics for the ISO to address:

    • expanding performance evaluation methodologies,
    • enhancing demand flexibility market options,
    • expanding or developing reliability-based DR participation options,
    • expanding or developing economic-based DR participation models,
    • optimizing market options for direct or indirect participation of DERs and
    • expanding demand-side bidding options

However, in Nov. 6 comments on the DDEMI initiative, CAISO’s Department of Market Monitoring (DMM) said the ISO has not clarified the costs and benefits of the working group’s priority areas and should provide an assessment.

“Without any such assessment, it appears to DMM these enhancements should have a lower priority than numerous other policy efforts currently underway, such as the Extended Day-Ahead Market (EDAM) congestion rent allocation refinements, congestion revenue rights reforms, storage bid cost recovery and default energy bids and uncertainty products,” DMM said.

DMM also asked CAISO to develop a new resource model that would allow DR resources to show as demand-side resources, rather than supply-side resources.

“Treating demand response as a real-time demand-side resource improves market efficiency by adding slope to the demand curve, which enhances reliability and reduces system costs by avoiding uneconomic load scheduling,” DMM said.

However, if demand response is modeled as load, coordination with CAISO’s capacity planning framework will be required, DMM said. Demand modeled as load would affect long-term load forecasts and the qualifying capacity of resources.

In the paper, CAISO staff said there currently is no pathway for DER aggregations to qualify for resource adequacy. This issue involves the California Public Utilities Commission, which would need to develop a qualifying capacity approach for DER aggregation RA, the paper says.

For the Reliability Demand Response Resources (RDRR) area, the working group found that reliability demand response programs do not include a resource’s startup costs during economic dispatch. The group also found that the RDRR dispatch limit is 100 MW, even if the resource’s capacity is more than 100 MW.

DMM asked CAISO to accurately represent RDRR characteristics, such as startup costs, in the market to help preserve access to these reliability resources.

As for next steps in the initiative, CAISO is collecting stakeholder feedback about how the ISO should prioritize future DDEMI policy development in the short term (between 2026 and 2027), mid term (2028-2030) and long term (beyond 2030).

FERC Approves SPP Process for Incremental Capacity

FERC has approved an SPP tariff revision designed to accelerate the addition of new generation by quickly adding shovel-ready incremental capacity — up to 20% of the facility’s “maximum injection capability” — at existing generating sites.

The commission said in its Nov. 28 order that SPP’s temporary priority process “makes efficient use of the existing transmission system” by queuing eligible generator-interconnection requests higher than existing study clusters that haven’t started. It said the proposed accelerated time frame, not subject to waiting for open seasons or processing as part of a cluster or from needs driven by other requests, ensures customers can interconnect in a “reliable, efficient, transparent and timely manner” (ER25-3570).

The priority process meets FERC’s “independent entity variation standard” and its Orders 2003 and 2023-A. The process was accepted Nov. 28, became effective Dec. 1 and will be in place until March 1, 2026. That’s when SPP’s consolidated planning process, assuming FERC approves it, is to take effect. The CPP, an integrated, three-year transmission planning cycle blended with generator-interconnection studies, is planned to produce its first assessment in 2028. (See SPP Celebrates Novel Consolidated Planning Process.)

But the commission rejected two other tariff revisions by SPP: its proposals to expand eligibility for the priority process to generators retired for less than five years (ER26-153) and to modify the queue’s priority for interconnection and priority requests (ER26-153).

FERC ruled the priority request process enables SPP to meet “projected near-term resource adequacy needs more quickly” than would its existing study cluster process. It agreed with the RTO’s contention that the commission has “recognized the benefits of improved queue efficiency.”

“The priority process will improve the efficient interconnection of new generating facility capacity by allowing incremental additions to existing generating facilities to come online in an expedited manner without impacting existing interconnection customers,” FERC said, quoting its own statements.

The grid operator told the commission its current GI process “may be unable to meet the near-term resource adequacy needs” of its load-responsible entities that are “subject to a set of heightened eligibility and financial-readiness requirements.”

FERC in August approved separate planning reserve margins for the 2026 summer and winter seasons that LREs must meet; those that fall short could incur deficiency payments. The approval set a 36% PRM for the winter season and a 16% margin for the summer. (See FERC Approves SPP’s Separate Winter, Summer PRMs.)

The commission found the priority process is “narrowly tailored” to address the RTO’s near-term resource adequacy or reliability needs because it applies only to existing facilities — and just once — and because the eligibility and financial-commitment requirements “prevent speculative interconnection requests,” reducing the potential for time-consuming restudies.

Priority project owners must cover all costs of the priority system impact studies and all necessary substation network and system network upgrades.

FERC said the heightened eligibility and financial readiness criteria limit an interconnection customer’s ability to qualify for the one-time study. “These limits allow only ready projects that do not impact existing interconnection customers” to use the priority process, it said.

In rejecting SPP’s two related tariff revision proposals, the commission said the grid operator lacked details for allowing retired generators to take advantage of the priority process. It pointed to lack of clarity over whether the project could be 120% of the size of the retired generator or 20% of its size.

New ESR Load Assessment

FERC also accepted SPP’s tariff revisions that outline the study requirements for load assessments of electric storage resources (ESRs) subject to the RTO’s generator-interconnection procedures, effective Oct. 7, 2025 (ER25-3105).

The commission found that because SPP’s revisions incorporated FERC’s pro forma LGIP language from Orders 2023 and 2023-A, they were deemed just and reasonable and not unduly discriminatory or preferential. It said the deviations from the commission’s pro forma LGIP and LGIA accomplished the purposes of Orders 845 and 2023.

FERC said SPP’s proposal to define a new term in its tariff — ESR-LA, for ESR load assessment — to evaluate the effects of an ESR withdrawing energy from the transmission system, in accordance with NERC Reliability Standards, will help facilitate the reliable interconnection of new ESRs.

“SPP’s proposed revisions specify that SPP will study an electric storage resource only under off-peak conditions and then assess whether any charging limitations must be imposed on that resource,” the commissioners wrote. “Studying the resources under off-peak conditions is based on the resource’s expected real-time charging behavior, and any charging limitations will be based on the available capacity of the transmission system.”

The RTO’s proposal will apply to those interconnection requests submitted in the 2024 study cluster window.

ISAC Speakers Tout Cross-sector Partnerships

Cross-sector coordination will be vital to protecting the electric grid and other critical infrastructure operators from rapidly expanding cyber and physical security threats, Matt Duncan of the Electricity Information Sharing and Analysis Center said on a panel with colleagues from other industries.

“It is increasingly [clear] that we can’t just do this [alone] as critical infrastructure; we need government, [and] we need supply chain vendors, because we all share the same attack surface,” Duncan, E-ISAC’s vice president of security operations and intelligence, said during a Dec. 2 Talk with Texas RE webinar.

“And even though the [E-ISAC] is just one of many ISACs, we know that electric power is essential to every infrastructure sector [and] every part of the economy, so we take our responsibility very seriously, not only to work with utilities but [with] cross-sector partners as well,” he said.

Duncan’s fellow panelists included John Bryk, manager of intelligence and risk analysis at the Downstream Natural Gas ISAC; Angela Haun, executive director of the Oil and Natural Energy ISAC (previously the Oil and Natural Gas ISAC); and Chuck Egli, director of security and resilience operations at the Water ISAC.

The talk came just a few weeks after GridEx VIII, the latest iteration of the biennial security exercise that drew more than 15,000 participants from over 370 organizations. (See GridEx Participants Report No Disruption from Shutdown.)

Several panelists pointed to GridEx as an example of the potential benefit from establishing cross-sector ties; Egli mentioned that the Water ISAC has even organized its own version of the exercise, H20Ex, along with H20SecCon, a conference on water infrastructure security inspired by the E-ISAC’s annual GridSecCon event.

“We’ve looked to the E-ISAC, in particular, as an example for how to bring those similar offerings to the sector and bring in more value,” Egli said. “A lot of it was, I think, thanks to being … very much involved … in the planning of those events, that we were able to then make them happen for our sector as well.”

Asked by Joseph Younger, the head of Texas RE’s Compliance Monitoring and Enforcement Program, how utilities can “get this right” regarding cross-sector coordination, Duncan said “one of the ways to get it right is to get it wrong, and the best place to get it wrong is in an exercise.” He said GridEx and similar exercises are a good way to find the weak points within either an organization or its dependencies, before they cause a real-world emergency.

Bryk said interdependency with other sectors “is probably one of the biggest [issues] we deal with” in the DNG-ISAC. He likened the problem to “the butterfly effect,” because a relatively minor problem in one sector can cause “a hurricane in the next sector.”

“Electricity helps us get gas out of the ground and move it, and gas helps [generate] electricity … so it can get to people. Water has to provide the cooling for things … There’s just no end to it,” he said.

The National Council of ISACs is a resource to help sort out such confusion, Bryk said, adding that “everything we do depends on the next ISAC in the line.” The NCI aims to help by creating playbooks of common practices and responses so that in a crisis, “we don’t have to go through that process of reinventing the wheel every time.”

Haun said the role of an ISAC is not “hands on keyboards [or] being on site,” but in collecting information during an emergency and making sure utilities have the data they need to address the issue.

“It’s not enough to say the sky is falling. It’s important that we talk about what they can do to protect their companies, their people, their assets, the critical infrastructure [and] ultimately the country,” Haun said. “So I’m just very passionate about having those relationships in advance and knowing who to talk to and being good partners, and that’s where the trust is developed, in my experience.”

DOE Awards Holtec, TVA $800M to Build Pioneering SMRs

The U.S. Department of Energy has awarded $800 million to the Tennessee Valley Authority and Holtec Government Services to support construction of what may be the country’s first advanced small modular reactors.

DOE said Dec. 2 that the cost-shared funding is part of President Donald Trump’s energy dominance agenda, which includes a nuclear renaissance.

Both funding awards are $400 million and center on Gen III+ light-water SMRs.

TVA plans to place a GE Vernova Hitachi BWRX-300 at its Clinch River site in Tennessee and accelerate the deployment of other such units in cooperation with Indiana Michigan Power and Elementl Power. (See TVA First U.S. Utility to Request SMR Construction Permit.)

Holtec, which is shaping itself as a one-stop shop for SMR development — technology developer and vendor, supply chain vendor, and plant constructor — plans to deploy two of its SMRs beside the formerly retired Palisades Nuclear Generating Station, which it is preparing to restart.

The two awards constitute the bulk of the $900 million solicitation DOE issued in March to help early movers in the SMR sector reduce risks. The remaining $100 million will be awarded later this year, DOE said.

“Advanced light-water SMRs will give our nation the reliable, round-the-clock power we need to fuel the president’s manufacturing boom, support data centers and AI growth, and reinforce a stronger, more secure electric grid,” Energy Secretary Chris Wright said. “These awards ensure we can deploy these reactors as soon as possible.”

Holtec said the first-mover award would catalyze the first-of-a-kind deployment of its proprietary SMR-300, which it calls Pioneer 1 and 2. This supports its effort to build a repeatable, standardized, fleet-scale model, which was a core requirement of the DOE funding offer.

“We are energized by DOE’s confidence in our SMR-300 reactor, which we view as validation of our 14-year quest to develop a walk-away-safe and cost-competitive nuclear reactor,” Holtec International CEO Kris Singh said.

Similarly, TVA said the Clinch River project would serve as a national model for how to deploy SMRs safely, efficiently and affordably.

“With DOE’s support and the strength of our partners, we’re accelerating the deployment of next-generation nuclear — reducing financial risk to consumers and strengthening U.S. energy security,” CEO Don Moul said. “This is how we deliver reliable, affordable energy and real opportunity for American families.”

GE Vernova Hitachi Nuclear Energy is part of the coalition TVA put together to apply for the DOE funding. GE Vernova CEO Scott Strazik said in a news release: “The BWRX-300 is the only commercial SMR technology being built right now in the Western world, and this grant will accelerate its deployment in the U.S.”

Earlier in 2025, Ontario Power Generation broke ground on a BWRX-300 facility that eventually is expected to house four SMRs.

Power Industry Asks Congress to Authorize Cyber Defense Programs

Electricity sector participants urged Congress to back cyber security programs as the House Committee on Energy and Commerce’s Subcommittee on Energy heard testimony on the efforts of nation-states and other actors to hack the bulk power system.

The Electricity Information Sharing and Analysis Center (E-ISAC) is the industry’s clearinghouse for information on cyber and physical threats that works government and other sectors to reduce security risks, NERC Senior Vice President and E-ISAC CEO Michael Ball said at the Dec. 2 hearing.

“The threat landscape is complex,” Ball said. “It includes continuously evolving threats from sophisticated and very capable adversaries; among the most advanced are nation-states … which are very well-funded.”

Ball said “numerous public reports underscore how these adversaries focus on the electric sector” and cited China, Russia, Iran and North Korea as being “monitored closely.”

Chinese cyber threats have dominated risks to North America recently, as Russia and Iran are more focused on conflicts in their regions, Ball said in his written testimony. He said Salt Typhoon and other hacking groups to which attacks have been attributed are believed to be operated by China’s Ministry of State Security. Ball’s written testimony lists cyber attacks against other sectors, but that is no comfort for E-ISAC, he noted.

“The technologies targeted by Salt Typhoon are prolific across critical infrastructure sectors, including the electric sector, which makes repurposing tactics, techniques and procedures learned targeting one sector easier when targeting the next,” Ball said.

The rise in electricity demand most often linked to data center growth also offers new risks as Salt Typhoon targets those facilities. A NERC report from early 2025 highlights the risks sudden outages of large loads can pose to the grid, Ball said. (See Data Centers’ Reliability Impacts Examined at FERC Meeting.)

Just the fact that load growth is cutting into reserve margins increases the risk of any kind of event on the grid, including cyber and physical attacks, said Kenergy CEO Tim Lindahl, who was testifying on behalf of the National Rural Electric Cooperative Association.

“One of the concerns we have as we run the grid closer and closer to the edge is it becomes more and more critical to not have interruptions before we could have a small event and it wouldn’t have an impact on the reliability of the grid,” he said. “But as we push the grid to the limit with new load — data center load, or any kind of load — it just puts a microscope on any hiccup in the system that could happen.”

Any kind of event becomes riskier as the system is more tightly balanced, but Kenergy — a Kentucky co-op — is dealing with that by investing in new fiber-optic communication systems so it can better monitor its distribution system and help thwart attacks, Lindahl said.

‘Embracing Modernization’

The long-run solution to cyber security will include modernizing infrastructure control systems as much as possible because keeping them entirely separate from the internet has proved infeasible, said Harry Krejsa, director of the Carnegie Mellon Institute for Strategy and Technology.

“Digitization has swept our world so thoroughly that even national security networks that are believed to be air-gapped often are found to have accidental and unknown internet connections during regular security sweeps and efforts to ensure their ongoing defensibility from adversaries abroad,” Krejsa said. “The only way around this challenge will be through embracing modernization from top to bottom.”

E-ISAC CEO Michael Ball, Xcel Energy Vice President Sharla Artz, Kenergy CEO Tim Lindahl, Carnegie Mellon University’s Harry Kresja and Idaho National Laboratory’s Zach Tudor at the hearing Dec. 2. | House Committee on Energy and Commerce

The economic changes driving up electricity demand are already advancing that work, added Krejsa, who worked in the Office of the National Cyber Director under the Biden administration.

“The energy technologies powering this transition, from onsite generation and battery storage to smart inverters and virtual power plants, were designed from the ground up with software at their core enabling modern cyber security features and the ability to update and evolve in response to emerging threats,” Krejsa said. “They are also enabling a smarter, more distributed grid architecture, one that is more defensible, resilient and even self-healing, capable of quarantining disruptions and preventing cascading blackouts.”

That transition includes using components from China, which dominates manufacturing in general and “electrotech” specifically. Krejsa recommended a reshoring effort there, but noted also some of the most sensitive national security programs use Chinese components.

“I think it’s instructive to take a look at the case of the F-35, which does not have zero Chinese-made components,” Kresja said. “The defense industrial base, instead, makes a risk-informed prioritization decision about where the cut line is for components.”

Congress could help the power industry and advanced manufacturing parse which components are too sensitive to risk backdoors for Chinese (or other) hackers and which can be reliably sourced from anywhere, he added.

Actionable Intelligence Needed

Information-sharing is vital when it comes to emerging threats, and the Energy Threat Analysis Center (ETAC), set up in 2023 as a pilot program, has helped improve dissemination of information to utilities whose systems are under threat, Xcel Energy Vice President Sharla Artz said.

“The private sector must be supported by the government to address national security risks. An essential component of that support is the timely sharing of actionable intelligence about our adversaries, tactics and their motivations,” she added. “Armed with this intelligence, private-sector experts can proactively architect security into their systems, hunt for adversarial activity and mitigate the risks from these threats.”

ETAC already has shared important information with the sector on Salt Typhoon attacks, and Artz said Congress should authorize it to become permanent so the partnership can grow and evolve to address new threats.

“Explicit recognition of this program allows industry partners and DOE to shape the joint effort to address the evolving risk landscape and to incorporate needed partners in the work effort,” Artz said in written testimony.

E-ISAC’s Ball suggested authorizing ETAC to help further its mission, and he asked Congress to fund smaller utilities’ cyber defense and to reauthorize the Cybersecurity Information Sharing Act of 2015. The act is meant to facilitate information sharing and was temporarily extended to Jan. 30, 2026.

“Industry sources report that the law has enhanced response capabilities to cyber incidents and meaningfully advanced information sharing and cyber defense,” Ball said in written testimony. “As a private entity, expiration of the law has no immediate negative consequences on E-ISAC operations. However, the law does encourage information sharing with ISACs and other sharing relationships. Reauthorization would support the broader information sharing ecosystem and preserve a highly valued framework for the private sector.”

Ontario Greenlights Overhaul of Pickering Nuclear Station

Ontario has approved a $26.8 billion CAD plan to overhaul four aging nuclear reactors that supply approximately 11% of the province’s electricity needs.

Ontario Power Generation said the refurbishment of Units 5 to 8 at the Pickering Nuclear Generating Station will extend their operation by up to 38 years.

The Ontario government announced the approval Nov. 26, saying the project would protect the province’s workforce and long-term energy security while building a more resilient, self-reliant economy in the face of U.S. tariffs.

The OPG facility on the outskirts of Toronto is one of the largest and oldest nuclear power stations in the world. Units 1-4 began operation from 1971 to 1973 and have been removed from service. Units 5-8 began operation from 1983-1986 and are licensed to operate through the end of 2026.

Units 5-8 are rated at 2.1 GW. Minister of Energy and Mines Stephen Lecce said the project would boost their output to as much as 2.2 GW.

The Pickering refurbishment was greenlit as OPG nears completion of a similar project at its Darlington Nuclear Generating Station, 17 miles east of Pickering, that is expected to cost $12.8 billion.

The Pickering project is larger and more complex, including the replacement of all 48 steam generators and the addition of a 1,500-meter deep-water intake structure, neither of which was needed for Darlington.

OPG said more than 7,000 lessons learned through the Darlington overhaul will help shape the Pickering project. The work is expected to begin in early 2027, after final licensing approval by the Canadian Nuclear Safety Commission, and continue through the mid-2030s.

Approval of the Pickering overhaul was not unexpected, but the plan is not universally supported.

Environmental Defence said Ontario’s government had locked the province into a high-cost, high-risk energy strategy that would steer away from wind and solar generation.

There also has been criticism of Canada’s decision to emphasize development of advanced nuclear power. (See Ontario Environmentalists Slam New Nuclear Units.)

Lecce alluded to the opposition in his Nov. 26 announcement: “After the previous government’s attempt to shut down the facility, this refurbishment signals that we are doubling down on Canadian technology, Canadian workers and the Canadian supply chain to protect our economy from global instability.”

Nuclear is the leading form of transmission-connected capacity in the IESO grid as of September: 12.18 GW, or 32% of total nameplate capacity. In 2024, Ontario’s nuclear reactors generated 80 TWh of electricity, or 51% of all power sent to the grid.

The province expects nuclear to remain a central part of its energy portfolio in the future. This was emphasized in “Energy for Generations,” Ontario’s first-ever integrated energy plan, the front cover of which features a sweeping view of the Darlington station. (See Ontario Integrated Energy Plan Boosts Gas, Nukes.)

OPG is building what is expected to be the first small modular reactor in North America beside Darlington at an expected cost of $7.7 billion. (See Ontario Greenlights OPG to Build Small Modular Reactor.) Planned construction of three subsequent SMRs on the same site is expected to bring the total project cost to $20.9 billion.