FERC audits find gaps in power generator registration and shared control centres

What happened. Ampyx Cyber highlighted findings from the US Federal Energy Regulatory Commission's 2026 cybersecurity audits. Inverter-based generators operated above thresholds before registration or required evaluations. Some shared control centres met medium-impact criteria although operators classed them low impact. Artificial intelligence access controls were also flagged.

Who is affected. Several US entities registered with the North American Electric Reliability Corporation (NERC), including inverter-based generation operators and third-party providers running shared control centres.

What to do. Check whether your inverter-based generation is registered, and whether shared control centres are rated at the right impact level. Review access controls on AI tools.