Similar to mutual aid following major storms and other events, utilities can get help from peers at other utilities following cyber incidents. For 10 years, the Electricity Subsector Coordinating Council's Cyber Mutual Assistance program has brought together public power, co-ops, investor-owned utilities, and natural gas companies to share knowledge and offer support with the aim of improving collective defense.
Whether putting out a request for aid or providing support, utilities can choose when — and in what ways — they participate in the program.
Join
Public power utilities can sign up for no cost in "blue sky" times, either through the ESCC or APPA.
- Designate a CMA coordinator
- Sign and return a mutual non-disclosure agreement.
Get Resources
New participants gain access to playbooks and cyber tools upon joining.
Attend Briefings
CMA staff host briefings on geopolitical events and emerging threats.
Information Sharing
Get alerts from fellow members about cyber incidents, giving advanced warning of possible threats.
Request Assistance
Utilities can put out a request for emergency assistance (following an incident), or for other support to proactively boost their cybersecurity.
Offer Advice or Help
Other program participants can choose to offer their fellow members services, personnel, and equipment.
- Recipients of emergency cyber assistance reimburse supporting members for relevant costs and expenses.
