Electricity Information Sharing and Analysis Center
Stored: Electricity Information Sharing and Analysis Center
| ||||||||||||||||||||||
| ||||||||||||||||||||||
| ||||||||||||||||||||||
| ||||||||||||||||||||||
|
Electricity Information Sharing and Analysis Center (E-ISAC) is a non-profit organization operated by the North American Electric Reliability Corporation (NERC), established in 1999 to serve as the primary security information hub for the North American electricity industry. It gathers and analyzes security data, shares actionable intelligence with electric utilities, coordinates incident management, and collaborates with the U.S. Department of Energy and the Electricity Subsector Coordinating Council to mitigate cyber and physical threats to the grid.
Mission
The mission of the Electricity Information Sharing and Analysis Center is to strengthen the security of the North American electricity grid by providing timely, relevant, and actionable information on cyber and physical threats to its members and partners. It aims to enhance industry resilience through situational awareness, threat analysis, and coordination with government agencies and cross-sector stakeholders.[1]
Parent organization
The Electricity Information Sharing and Analysis Center operates under the North American Electric Reliability Corporation, which oversees electric reliability standards across North America. While NERC is its parent entity, E-ISAC maintains organizational separation from NERC’s regulatory functions to ensure focused security collaboration.[2]
Legislation
The E-ISAC was not created by specific legislation but emerged in 1999 following Presidential Decision Directive-63 (PDD-63) of May 22, 1998, which called for sector-specific organizations to share threat information. Its establishment aligns with broader U.S. efforts to protect critical infrastructure, later reinforced by the Homeland Security Presidential Directive 21 of 2013.[3]
Partners
The E-ISAC collaborates with:
- Department of Energy for threat analysis and response
- Electricity Subsector Coordinating Council (ESCC) for industry coordination
- Department of Homeland Security for national security integration[4]
- North American electricity and natural gas asset owners and operators
Number of employees
The exact number of E-ISAC employees is not publicly disclosed, though it maintains a team of cybersecurity and physical security experts sufficient to operate a 24/7 watch and analysis center.[5]
Organization structure
The E-ISAC is structured to deliver rapid threat response and includes:
- Cybersecurity Team manages threat intelligence and the CRISP program.
- Physical Security Team analyzes risks to infrastructure.
- Operations Team coordinates incident response and member communications.
Leader
The Electricity Information Sharing and Analysis Center is headed by an Executive Director.[6]
Divisions
The divisions include:
- Cybersecurity for threat monitoring and analysis.[7]
- Physical Security for infrastructure protection strategies.
- Member Services for delivering alerts and resources via the E-ISAC Portal.
List of programs
The E-ISAC oversees:
- Cybersecurity Risk Information Sharing Program (CRISP) - https://www.energy.gov/ceser/cybersecurity-risk-information-sharing-program-crisp[8]
- Threat Awareness Bulletins
- Incident Reporting and Analysis
Last total enacted budget
The E-ISAC’s budget is not publicly isolated but is funded through NERC, member contributions, and federal partnerships like the Department of Energy. Exact figures are unavailable.[9]
Staff
The E-ISAC staff size is not specified, but it includes in-house analysts, a 24/7 watch team, and support personnel, likely numbering dozens based on its operational scope.[10]
Funding
The E-ISAC is funded by NERC, member dues from electricity asset owners, and federal support, notably from the Department of Energy for programs like CRISP, with funding levels adjusted annually based on threat needs since 1999.[11]
Services provided
The E-ISAC provides cybersecurity threat intelligence, physical security analysis, incident coordination, and situational awareness tools like the E-ISAC Portal, enabling utilities to respond to evolving grid threats.[12]
Regulations overseen
As a non-regulatory entity, the E-ISAC does not oversee federal regulations but supports compliance with NERC reliability standards indirectly through threat mitigation.[13]
Headquarters address
The headquarters address, as listed on Google Maps, is 3353 Peachtree Road NE, Suite 600 North Tower, Atlanta, GA 30326, USA.
History
The Electricity Information Sharing and Analysis Center was created in 1999 following Presidential Decision Directive-63, prompted by growing concerns over critical infrastructure security. Operated by NERC, it evolved into a key player in grid security, notably transitioning the CRISP program from DOE management in 2014, now serving over 75% of U.S. electricity customers through its network.[14]
External links
- Official Website
- wikipedia:Electricity_Information_Sharing_and_Analysis_Center
- E-ISAC at NERC
- CRISP Program
References
- ↑ "Electricity Information Sharing and Analysis Center". North American Electric Reliability Corporation. https://www.nerc.com/pa/rrm/Pages/EISAC.aspx.
- ↑ "E-ISAC Overview". North American Electric Reliability Corporation. https://www.nerc.com/AboutNERC/Pages/E-ISAC.aspx.
- ↑ "Information Sharing and Analysis Center". Wikipedia. https://en.wikipedia.org/wiki/Information_Sharing_and_Analysis_Center.
- ↑ "Partners". Electricity Information Sharing and Analysis Center. https://www.eisac.com/partners.
- ↑ "About E-ISAC". Electricity Information Sharing and Analysis Center. https://www.eisac.com/about.
- ↑ "Electricity Information Sharing and Analysis Center". North American Electric Reliability Corporation. https://www.nerc.com/pa/rrm/Pages/EISAC.aspx.
- ↑ "Services". Electricity Information Sharing and Analysis Center. https://www.eisac.com/services.
- ↑ "CRISP". Department of Energy. https://www.energy.gov/ceser/cybersecurity-risk-information-sharing-program-crisp.
- ↑ "E-ISAC Overview". North American Electric Reliability Corporation. https://www.nerc.com/AboutNERC/Pages/E-ISAC.aspx.
- ↑ "About E-ISAC". Electricity Information Sharing and Analysis Center. https://www.eisac.com/about.
- ↑ "CRISP". Department of Energy. https://www.energy.gov/ceser/cybersecurity-risk-information-sharing-program-crisp.
- ↑ "Services". Electricity Information Sharing and Analysis Center. https://www.eisac.com/services.
- ↑ "Electricity Information Sharing and Analysis Center". North American Electric Reliability Corporation. https://www.nerc.com/pa/rrm/Pages/EISAC.aspx.
- ↑ "CRISP". Department of Energy. https://www.energy.gov/ceser/cybersecurity-risk-information-sharing-program-crisp.