The increasing use of ICS to manage the electric grid has been recognized as a threat to the transmission and generation sectors, but GAO’s report concludes federal security rules overlook increasing risks to distribution systems.
“Distribution systems are growing more vulnerable, in part because their industrial control systems increasingly allow remote access and connect to business networks,” the report found. “As a result, threat actors can use multiple techniques to access those systems and potentially disrupt operations.”
