FirstNet for Utilities Sought to Protect Critical Infrastructure From Cyberattacks

ORLANDO -- Utilities should demand faster release of 900 MHz spectrum for infrastructure cybersecurity efforts, said former FCC and California Public Utilities Commission member Rachelle Chong Tuesday at NARUC's annual conference (see 1811130001). “You know how FirstNet got spectrum just for emergency responders? We want utilities to have spectrum just for utility-critical infrastructure.”

Utilities should increase cross-sector coordination to protect critical infrastructure during cyberattacks and natural disasters, said government and utility representatives. The NARUC Critical Infrastructure Committee didn't take up a draft resolution promoting collaboration between state and federal regulators to prevent cyberattacks against electric utilities.

“The utility industry and regulators have been a little bit asleep at the switch over at the FCC on getting secure and reliable systems for utility operations,” said Chong, a board member of pdvWireless, which lost a bid for the FirstNet contract to AT&T. Facing cyber- and natural-disaster threats, electric and other utilities need a strong communications tool, she said. “We have a rare moment in time where the FCC is poised to potentially give exclusive licensed spectrum to utilities and to private enterprise.” The 900 MHz spectrum would let utilities transfer data and video rapidly with strong latency and resiliency, she said.

An NPRM about this 900 MHz spectrum could come in three to six months, and utilities should file comments in docket 17-200 to speed the process, said Chong. It could be another six to nine months until an order, then two years to clear spectrum, she said.

“The FirstNet simile is a good one,” with that network bringing significant enhancements to public safety communications, said Verizon Wireless principal engineer Chris Oberg, who chairs the Communications Infrastructure Information Sharing and Analysis Center. If the FCC proceeds with a 900 MHz offering that’s like FirstNet, “the industry knows how to do that.” Responding to cyberthreats requires a plan and collaboration, Oberg said. Comm-ISAC worked with other ISACs for electrical and financial industries to develop a tri-sector playbook, he said.

High risks demand that industry and government work together, which is why the Department of Homeland Security formed the National Risk Management Center, said center Director Bob Kolasky on an earlier panel. The biggest adversaries are nations that put great resources into understanding U.S. vulnerabilities including how to exploit interdependencies between utilities, he said. It’s important states engage because work must be done from the ground up, said Utilities Technology Council CEO Joy Ditto.

States and utilities should brace for “sustained” attacks, said Sonecon Managing Director Paul Stockton. States may have a “blue sky understanding” of interdependencies, but it’s important to know how utilities will communicate and prioritize restoration during an attack, he said. Before a cyberattack or natural disaster, states should consider the most important services that absolutely can't go down, said CenturyLink Senior Director-National Security/Emergency Preparedness Kathryn Condello. The telecom industry is most affected by natural disasters, she said.