Policy · 46 days ago
President Donald Trump signed an executive order Wednesday that bars certain foreign-produced bulk-power system equipment, software, and digital capabilities from being purchased or installed in the United States when they pose a national-security risk. The Energy Department now has 120 days to write the cybersecurity rules that will implement it, alongside other federal agencies.
The order targets the procurement side of grid security: it can block or condition acquisition, import, transfer, or installation of covered equipment if officials judge it risky. In plain terms, the rulemaking will decide what utilities and vendors can source, approve, or replace, so the compliance burden starts before the final technical details are fully settled.
For utilities, integrators, and suppliers, the exposure is the buying process itself. If your grid equipment or software sits in that foreign-supply chain, the near-term problem is not just future security requirements but possible contract delays, sourcing changes, and replacement pressure while the rule text is still being written.
4 sources covering this story
The Record from Recorded Future
White House bans foreign-made equipment for power generation over cyber backdoor concerns
The Trump administration is banning the acquisition of foreign-made components used to manage electricity and power, alleging that “certain foreign actors are increasingly creating and exploiting vulnerabilities” in the technology.
Trump Order Aims to Block Foreign Backdoors in US Power Grid Gear
The White House’s new executive order 14420 widens scrutiny of industrial control systems over cyber sabotage concerns.
President Donald Trump issues EO 14420 to secure US bulk-power systems from foreign equipment and cybersecurity risks.
Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure
The Energy Department has 120 days to draft and issue new cybersecurity rules under a recent executive order, collaborating with key federal agencies.
Part of the PlainSec briefing for 2026-08-28