U.S. Department of Energy Revokes December 2020 Prohibition Order Regarding Bulk-Power System Electric Equipment, Issues Additional Request for Information and Starts New, 100-Day Cybersecurity Initiative

Apr 21, 2021

Reading Time : 8 min

The Revocation Order and RFI are generally positive developments for utilities subject to the Prohibition Order, some of which struggled to develop compliance strategies to address vague and ambiguous aspects of EO 13920 and the Prohibition Order, as well as other electric industry players who do business with such utilities. Overall, the RFI represents significant progress in that it seeks feedback from diverse groups to inform whether and how to advance the Biden-Harris administration’s electric system security priorities—which did not occur before EO 13920—and seems likely to produce better-developed, targeted policy than EO 13920, which many viewed to be so overly broad as to be unworkable, and the Prohibition Order. However, certain of DOE’s questions in the RFI suggest the possibility of expansion of the scope or requirements of potential future actions similar to EO 13920 and the Prohibition Order, which could subject additional entities or business activities to restrictions. Thus, it will be critical for interested parties to make their views known to DOE in response to the RFI and to encourage any future action to be clearly explained and implemented.

Background

EO 13920 “declared an emergency that authorized the Secretary of Energy . . . to, among other actions, prohibit the acquisition, transfer, or installation of certain [bulk-power system (BPS)] electric equipment sourced from foreign adversary countries for one year.”9 In the Prohibition Order, DOE exercised its EO 13920 authority and prohibited the “acquisition, importation, transfer, or installation of specified [BPS] electric equipment that directly serves Critical Defense Facilities”10 (CDFs), which are facilities designated as such by the Secretary of Energy that are “located in the 48 contiguous States and the District of Columbia that are—(1) critical to the defense of the United States; and (2) vulnerable to a disruption of the supply of electric energy provided to such facility by an external provider.”11 The Prohibition Order targeted certain equipment and components “manufactured or supplied by persons owned by, controlled by, or subject to the jurisdiction or direction of” the People’s Republic of China.12

The Revocation Order

The Revocation Order recognizes that “[a]dversarial nation-state actors are targeting our critical infrastructure, with increasing focus on the energy sector,”13 and notes that DOE, to address such threats, “is engaged in partnership with the electricity subsector and other Federal agencies . . . in a comprehensive set of actions to strengthen supply chain risk management.”14 DOE also states that it “is developing recommendations to strengthen requirements and capabilities for supply chain risk management practices by the Nation’s electric utilities . . . to enable an approach that builds on, clarifies, and, where appropriate, modifies prior executive and agency actions.”15 The purpose of the Revocation Order, DOE states, is “to create a stable policy environment before the emergency declaration made by [EO 13920] expires on May 1, 2021, and while [DOE] conducts a Request for Information to develop a strengthened and administrable strategy to address the security of the U.S. energy sector.”16

The New RFI

Also on April 20, 2021, DOE issued the referenced Request for Information (RFI).17 The RFI states that the “United States Government recognizes the immediate imperative to secure our electric infrastructure” and that “[t]he electric power system is vital to the Nation’s energy security, supporting national defense, emergency services, critical infrastructure, and the economy.”18 Accordingly, the focus of the RFI is “[p]reventing exploitation and attacks by foreign threats to the U.S. supply chain.”19

The RFI explains that, in the process of developing recommendations as required by EO 13990, DOE “identified opportunities to institutionalize change, increase awareness, and strengthen protections against high-risk electric equipment transactions by foreign adversaries, while providing additional certainty to the utility industry and the public.”20 Accordingly, DOE “is seeking information from electric utilities, academia, research laboratories, government agencies, and other stakeholders on various aspects of the electric infrastructure” to inform consideration by the Biden-Harris administration regarding “whether to recommend a replacement Executive Order that appropriately balances national security, economic, and administrability considerations.”21 The RFI also notes that the Biden-Harris administration “is addressing critical infrastructure security through various actions and considers the protection and resilience of energy infrastructure to be a part of that comprehensive strategy,” which includes the “100-day sprint” to identify and develop recommendations regarding various supply chain risks initiated by Executive Order 14017 on America’s Supply Chains, issued February 24, 2021.22

The RFI includes a number of specific questions for stakeholders. Some topics include:

  • Recommendations for how DOE, in coordination with “the utility industry and appropriate regulators at all levels of government,” can develop a comprehensive, long-term strategy to address security concerns arising from foreign threats to the U.S. supply chain for electric power system equipment so that “procurement practices and requirements evolve to match changes in the threat landscape and best protect critical infrastructure.”23
  • How to “enable better testing of critical grid equipment, encourage better procurement and risk management practices, and develop a strong domestic manufacturing base with high levels of security and resilience.”24
  • How to “mitigate the risks associated with potentially compromised grid equipment that is already installed on the system, along with the potential costs and benefits of addressing such equipment.”25
  • The “advisability and feasibility of an expanded approach that would cover distribution facilities that serve CDFs” due to “the interconnected nature of the U.S. transmission and distribution networks across the U.S.”26
  • Whether DOE should, in addition to addressing Defense Critical Electric Infrastructure serving CDFs in a manner similar to the Prohibition Order, “seek to issue a Prohibition Order or other action that covers electric infrastructure serving other critical infrastructure sectors including communications, emergency services, healthcare and public health, information technology, and transportation systems,” and/or other “national critical functions.”27

The New Cybersecurity Initiative

Concurrently with the Revocation Order and RFI, DOE “launched an initiative to enhance the cybersecurity of electric utilities’ industrial control systems (ICS) and secure the energy sector supply chain” to help “safeguard U.S. critical infrastructure from persistent and sophisticated threats.”28 According to a DOE press release, “[t]his 100 day plan—a coordinated effort between DOE, the electricity industry, and the Cybersecurity and Infrastructure Security Agency (CISA)—represents swift, aggressive action[] to confront cyber threats from adversaries who seek to compromise critical systems that are essential to U.S. national and economic security.”29

The initiative will “modernize[] cybersecurity defenses” and:

  • “Encourage[] owners and operators to implement measures or technology that enhance their detection, mitigation, and forensic capabilities;”
  • “Include[] concrete milestones over the next 100 days for owners and operators to identify and deploy technologies and systems that enable near real time situational awareness and response capabilities in critical [ICS] and operational technology (OT) networks;”
  • “Reinforce[] and enhance[] the cybersecurity posture of critical infrastructure information technology (IT) networks;” and
  • “Include[] a voluntary industry effort to deploy technologies to increase visibility of threats in ICS and OT systems.”30

Next Steps

Comments on the RFI will be due 45 days after its publication in the Federal Register. It appears that DOE anticipates that the deadline will be Monday, June 7, 2021.31

DOE intends to use the comments “to evaluate new executive actions to further secure the nation’s critical infrastructure against malicious cyber activity and strengthen the domestic manufacturing base.”32 DOE also states that, “during the period of time in which further recommendations are being developed, [it expects that] utilities will seek to act in a way that minimizes the risk of installing electric equipment and programmable components that are subject to foreign adversaries’ ownership, control, or influence.”33 Accordingly, while the compliance situation remains in flux, both utilities that were subject to the Prohibition Order and other industry players implicated by the broad strokes of EO 13920 should remain vigilant with respect to potential threats to their systems and facilities and continue to think about ways to mitigate supply chain and operational risks. And because it is likely that stakeholder comments will inform any future Biden-Harris administration actions in this area, stakeholders should take full advantage of this additional opportunity to share their views with DOE.

With respect to the cybersecurity initiative, “[o]ver the next 100 days, DOE’s Office of Cybersecurity, Energy Security, and Emergency Response (CESER)—in partnership with electric utilities—will continue to advance technologies and systems that will provide cyber visibility, detection, and response capabilities for industrial control systems of electric utilities.”34

Additional information regarding DOE’s efforts to secure critical electric infrastructure is available here.


1 U.S. Dep’t of Energy, Revocation of Prohibition Order Securing Critical Defense Facilities (6450-01-P), at 1 (Apr. 20, 2021), https://www.energy.gov/sites/deault/files/2021-04/Revocation%20of%20Prohibition%20Order%200420
2021.pdf (“Revocation Order”).

2 U.S. Dep’t of Energy, Prohibition Order Securing Critical Defense Facilities, 86 Fed. Reg. 533 (Jan. 6, 2021), https://www.govinfo.gov/content/pkg/FR-2021-01-06/pdf/2020-28773.pdf (“Prohibition Order”).

3 Executive Order 13990, Protecting Public Health and the Environment and Restoring Science to Tackle the Climate Crisis, 86 Fed. Reg. 7037 (Jan. 25, 2021), https://www.govinfo.gov/content/pkg/FR-2021-01-25/pdf/2021-01765.pdf (“EO 13990”).

4 Executive Order 13920, Securing the United States Bulk-Power System, 85 Fed. Reg. 26595 (May 4, 2020), https://www.govinfo.gov/content/pkg/FR-2020-05-04/pdf/2020-09695.pdf (“EO 13920”).

5 EO 13990 at 7042.

6 Press Release, U.S. Dep’t of Energy, Biden Administration Takes Bold Action to Protect Electricity Operations from Increasing Cyber Threats (Apr. 20, 2021), https://www.energy.gov/articles/biden-administration-takes-bold-action-protect-electricity-operations-increasing-cyber-0.

7 U.S. Dep’t of Energy, Notice of Request for Information (RFI) on Ensuring the Continued Security of the United States Critical Electric Infrastructure (6450-01-P), at 5 (Apr. 20, 2021), https://www.energy.gov/sites/default/files/
2021-04/RFI%20Ensuring%20the%20Continued%20Security%20of%20US%20Critical%20Electric%20
Infrastructure%2004202021.pdf.

8 Press Release, supra note 6, at 1.

9 Revocation Order at 2 (citing EO 13920 at 26595-96).

10 Prohibition Order at 533.

11 16 U.S.C. § 824o-1(c) (2018).

12 Prohibition Order at 534.

13 Revocation Order at 1.

14 Id.

15 Id. at 1-2.

16 Id. at 3.

17 RFI at 1.

18 Id. at 1.

19 Id.

20 Id.

21 Id. at 1-2.

22 Id. at 3-4; Executive Order 14017, America’s Supply Chains, 86 Fed. Reg. 11849 (Mar. 1, 2021), https://www.govinfo.gov/content/pkg/FR-2021-03-01/pdf/2021-04280.pdf.

23 RFI at 7.

24 Id.

25 Id.

26 Id. at 9.

27 Id. The RFI defines “national critical functions” as “functions of government and the private sector so vital to the United States that their disruption, corruption, or dysfunction would have a debilitating effect on security, national economic security, national public health or safety, or any combination thereof.” Id. at 9, n.12 (citing Executive Order 13865, Coordinating National Resilience to Electromagnetic Pulses, 84 Fed. Reg. 12041 (Mar. 29, 2019)).

28 Press Release, supra note 6, at 1.

29 Id.

30 Id.

31 U.S. Dep’t of Energy, Securing Critical Electric Infrastructure, https://www.energy.gov/oe/securing-critical-electric-infrastructure (last visited Apr. 20, 2021).

32 Press Release, supra note 6, at 1.

33 RFI at 6.

34 Press Release, supra note 6, at 1.

Share This Insight

Previous Entries

Speaking Energy

March 10, 2025

On March 5, 2025, the United States Department of Energy (DOE) approved Golden Pass LNG Terminal LLC’s (GPLNG) request to extend a deadline to begin exporting liquefied natural gas (LNG) from its terminal facility currently under construction in Sabine Pass, Texas for 18 months, from September 30, 2025, to March 31, 2027 (the Order). The Order amends GPLNG’s two existing long-term orders authorizing the export of domestically produced LNG to countries with which the United States does and does not have free trade agreements (FTA).1  The Order does not amend the authorizations’ end date, which remains December 31, 2050. Under section 3 of the Natural Gas Act (NGA), the DOE may authorize exports to non-FTA countries following completion of a “public interest” review, whereas exports to FTA countries are deemed to be in the public interest and the DOE is directed to issue authorizations without modification or delay.

...

Read More

Speaking Energy

March 4, 2025

Join projects & energy transition partner Shariff Barakat at Infocast’s Solar & Wind, where he will moderate the “Tax Equity Market Dynamics” panel.

...

Read More

Speaking Energy

February 13, 2025

Oil & gas companies continue to identify and capitalize on opportunities related to the deployment of new energy technologies, with their approaches broadly maturing and coalescing around maximizing synergies, leveraging available subsidies and responding to regulatory drivers.

...

Read More

Speaking Energy

February 11, 2025

On January 30, 2025, the Federal Energy Regulatory Commission (FERC or the Commission) approved a Stipulation and Consent Agreement (Agreement) between the Office of Enforcement (OE) and Stronghold Digital Mining Inc. (Stronghold) resolving an investigation into whether Stronghold had violated the PJM Interconnection, L.L.C. (PJM) tariff and Commission regulations by limiting the quantity of energy made available to the market to serve a co-located Bitcoin mining operation.1 This order appears to be the first instance of a public enforcement action involving co-located load and generation and comes at a time when both FERC and market operators2 are scrutinizing the treatment of co-located load due to the rapid increase in demand associated with data center development.

...

Read More

Speaking Energy

February 5, 2025

2024 was about post-consolidation deal flow and a steady uptick in activity across the oil & gas market. This year, mergers & acquisitions (M&A) activity looks set to take on a different tone as major consolidation plays bed down.

...

Read More

Speaking Energy

January 30, 2025

The oil & gas industry is experiencing a capital resurgence, driven by stabilizing interest rates and renewed attention from institutional investors. Private equity is leading the charge with private credit filling the void in traditional energy finance and hybrid capital instruments gaining in popularity. Family offices are also playing a crucial role, providing long-term, flexible investments.

...

Read More

Speaking Energy

January 23, 2025

Under a second Trump presidency, the U.S. is expected to consider reversal of many of the Biden administration’s climate and environmental policies, in addition to a markedly different approach to trade policy and oil & gas regulation. This includes expanding oil & gas development on public lands and offshore, lifting the pause on liquified natural gas (LNG) exports to non-Free Trade Agreement countries and repealing the methane fee.

...

Read More

Speaking Energy

January 15, 2025

We are pleased to share a recording of Akin’s recently presented webinar, “Drilling Down: What Oil & Gas Companies Can Expect from Federal Agencies During Trump’s Second Administration.”

...

Read More

© 2025 Akin Gump Strauss Hauer & Feld LLP. All rights reserved. Attorney advertising. This document is distributed for informational use only; it does not constitute legal advice and should not be used as such. Prior results do not guarantee a similar outcome. Akin is the practicing name of Akin Gump LLP, a New York limited liability partnership authorized and regulated by the Solicitors Regulation Authority under number 267321. A list of the partners is available for inspection at Eighth Floor, Ten Bishops Square, London E1 6EG. For more information about Akin Gump LLP, Akin Gump Strauss Hauer & Feld LLP and other associated entities under which the Akin Gump network operates worldwide, please see our Legal Notices page.