Bulk-Power Order Pushes Procurement Into Compliance Clock

President Donald Trump signed an executive order Wednesday that bars certain foreign-produced bulk-power system equipment, software, and digital capabilities from being purchased or installed in the United States when they pose a national-security risk. The Energy Department now has 120 days to write the cybersecurity rules that will implement it, alongside other federal agencies. The order targets the procurement side of grid security: it can block or condition acquisition, import, transfer, or installation of covered equipment if officials judge it risky. In plain terms, the rulemaking will decide what utilities and vendors can source, approve, or replace, so the compliance burden starts before the final technical details are fully settled. For utilities, integrators, and suppliers, the exposure is the buying process itself. If your grid equipment or software sits in that foreign-supply chain, the near-term problem is not just future security requirements but possible contract delays, sourcing changes, and replacement pressure while the rule text is still being written.

Part of the PlainSec briefing for 2026-08-27

Editions

Sources