In the event a cyber incident affects utility systems, public power leaders can turn to the Electricity Subsector Coordinating Council’s Cyber Mutual Assistance program. The program brings together industry cybersecurity experts to assist in incident response and to share information on threats to the industry. Similar to mutual aid provided in emergency events, the CMA does not require participants to provide support; all mutual assistance is voluntary. There is no cost to participate in the CMA program, though recipients of emergency cyber assistance reimburse supporting members for relevant costs and expenses. CMA program members also have opportunities for training, exercising, and relationship-building through two in-person meetings each year.
To participate, entities must execute a mutual non-disclosure agreement. Participating entities also must designate a CMA coordinator with appropriate cyber skills and experience, and the necessary authority to represent the entity in the CMA program.