An aging grid and severe weather already cause power outages, but armed attacks and cyberattacks on energy infrastructure loom large. The Department of Homeland Security and Department of Justice single out grid attacks as a popular tactic to foment societal unrest and inflict economic damage. Vulnerabilities grow as the grid evolves to become more decentralized, digitized, and decarbonized. 

The four pillars of robust substation security—detect, analyze, communicate and respond—are interrelated and supported by an ecosystem of tools and technologies that deliver the visibility, understanding, and communication capabilities needed for utilities to protect their substations. This playbook makes the case for a holistic approach to substation cybersecurity and physical security that begins with:

• Identifying and protecting against risks,
• Detecting when attacks take place,
• Responding with a well-considered plan, and 
• Ultimately recovering and implementing changes to prevent future incursions. 

​