In today’s technologically advanced environment, the motors, pumps, substations, switches and valves that control and operate our nation’s critical infrastructure systems are connected to the internet and vulnerable to cyberattacks. Hacking organizations around the world have already proven they can turn off the electricity to hundreds of thousands of homes by remotely accessing and changing the command settings of operational technology.

Control systems, or operational technology, are responsible for managing the flow of electricity, the distribution of clean water and the processing of telecommunication information, among many other critical commands. But these systems were designed and deployed before the internet existed, and they don’t always include updated and modern security features. With multimillion dollar price tags, long production lead times and lifespans that last several decades, replacing existing equipment is a difficult and costly endeavor.

To reduce the consequences of cyber-enabled sabotage, the U.S. Department of Energy’s Office of Cybersecurity, Energy Security and Emergency Response (CESER), in collaboration Idaho National Laboratory (INL), developed the CyberStrike training program. This program works to enhance the ability of energy sector owners and operators to prepare for a cyber incident impacting operational technology.