FERC finds cybersecurity gaps at US power firms, including AI access risks

What happened. The US Federal Energy Regulatory Commission (FERC) reported fiscal 2026 audit findings. Most processes met mandatory standards. Gaps included delays registering new generation resources, incomplete identification of critical cyber systems and access control risks from artificial intelligence tools.

Who is affected. US electricity sector entities registered with the North American Electric Reliability Corporation (NERC) that were audited.

What to do. Check your generation registration, critical cyber system identification and access controls on AI tools against the FERC findings. Consider the report's voluntary cybersecurity recommendations.