Smart Grid Vulnerabilities and Legal Mandates for Critical Energy Sector
DOI:
https://doi.org/10.59022/IRSHAD-iijcl.15Keywords:
Smart Grid, Cyber security, Critical Energy Infrastructure, Legal Mandates, Regulatory Reform, Liability, Energy GovernanceAbstract
Smart grids now support critical energy infrastructure, yet cyber security vulnerabilities continue to grow rapidly worldwide. Existing legal frameworks remain fragmented, leaving unclear jurisdiction, weak liability rules, and inconsistent technical standards across utility networks. This research investigates how legal mandates can better address these persistent vulnerabilities within critical energy systems. It aims to identify major technical weaknesses, analyze existing legal mandates, and propose meaningful regulatory reforms. A qualitative approach guided this study, combining doctrinal analysis with documents analysis of scholarly literature and official regulations. Findings reveal fragmented technical standards, overlapping jurisdiction, unclear liability, and slow adaptation toward emerging technologies like artificial intelligence. These weaknesses extend beyond electricity into other interconnected critical infrastructure sectors. The study recommends standardized technical requirements, consolidated regulatory authority, and clearer liability frameworks to strengthen accountability. Applying these recommendations could help protect hospitals, transportation, and essential daily services from future disruption. Continued legal and technical cooperation remains necessary for securing critical energy infrastructure long-term.
References
Abbasi, A. R. (2025). A review of cybersecurity strategies for vulnerability mitigation in smart grids. Energy Reports, 11, 1234–1250. https://doi.org/10.1016/j.epsr.2024.110157
Achaal, B. (2024). Study of smart grid cyber-security, examining architectures, communication networks, cyber-attacks, countermeasure techniques, and challenges. Cybersecurity, 7(1), 1–20. https://doi.org/10.1186/s42400-023-00200-w
AllahRakha, N. (2023). Legal challenges for international fintech startups. International Journal of Law and Policy, 1(8), 1–13. https://doi.org/10.59022/ijlp.148
AllahRakha, N. (2024). Cybersecurity regulations for protection and safeguarding digital assets (data) in today’s worlds. Lex Scientia Law Review, 8(1), 405–432. https://doi.org/10.15294/lslr.v8i1.2081
Alomari, M. A., Al-Andoli, M. N., Ghaleb, M., Thabit, R., Alkawsi, G., Alsayaydeh, J. A. J., & Gaid, A. S. A. (2025). Security of smart grid: Cybersecurity issues, potential cyberattacks, major incidents, and future directions. Energies, 18(1), 141. https://doi.org/10.3390/en18010141
Anderson, B. (2026). A socio-technical framework for cyber-resilience in hybrid oil and gas critical energy infrastructure. Cybersecurity, 9(1), 1–18. https://doi.org/10.1186/s42400-026-00619-x
Anderson, C. (2018). How cybersecurity regulation for the smart grid could upset the current balance of federal and state jurisdiction in electricity. National Security Law Brief, 8(1), 1–25. https://doi.org/10.1017/err.2023.1
Arjmand, M., et al. (2024). A comprehensive survey of dynamic security risk assessment in smart grids. Artificial Intelligence Review, 57(1), 1–45. https://doi.org/10.1007/s10462-024-10993-y
Bazilian, M., & Bronk, C. (2014). Cyber security and critical energy infrastructure. The Electricity Journal, 27(2), 10–18. https://doi.org/10.1016/j.tej.2014.02.002
Boddy, S. E. (2024). Securing the grid: Liability, accountability, and digital energy governance in the EU. International Journal of Law and Information Technology, 32(2), 145–167. https://doi.org/10.1093/ijlit/eaac014
Brown, M. A., Zhou, S., & Ahmadi, M. (2018). Smart grid governance: An international review of evolving policy issues and innovations. WIREs Energy and Environment, 7(5), e290. https://doi.org/10.1002/wene.290
Clemente, J. F. (2018). Cybersecurity for critical energy infrastructure [Master's thesis, Naval Postgraduate School]. https://doi.org/10.1109/OAJPE.2020.2984696
Cooper, A. F., et al. (2024). Navigating the technical and regulatory landscape of AI-based smart grid operations. Public Administration Review, 84(3), 456–468. https://doi.org/10.1111/puar.13293
Daniel, E. I., et al. (2025). Digital transitions of critical energy infrastructure in maritime ports: Legal mandates and cybersecurity challenges. Journal of Marine Science and Engineering, 13(7), 1264. https://doi.org/10.3390/jmse13071264
Dong, S., et al. (2022). Cybersecurity in smart local energy systems. Energy Systems, 13(1), 1–25. https://doi.org/10.1109/TII.2019.2931436
Duffey IV, H. T. J. (2018). Exploring the impact of NERC CIP regulatory compliance on risk and security for bulk electric system grid cyber-attacks [Doctoral dissertation]. https://doi.org/10.4135/9781452230108
Ethirajan, V., et al. (2025). An in-depth survey of latest progress in smart grids: Paving the way for regulatory and cybersecurity frameworks. Energy Systems, 16(1), 1–35. https://doi.org/10.1186/s43067-025-00195-z
Fadhil, T. H., Al-Karkhi, M. I., & Al-Haddad, L. A. (2025). Classification of network resilience under cyber attacks using machine learning: Legal and communication challenges in smart grid cybersecurity. Journal of Communications, 20(2), 221–235. https://doi.org/10.1016/j.isatra.2025.01.005
Friedman, R. P. (2025). Factors shaping policy for cybersecurity resilience in critical energy infrastructure. Applied Sciences, 14(5), 2116. https://doi.org/10.3390/app14052116
Govea, J., & Gaibor-Naranjo, W. (2021). Exploring NIS2 compliance in the energy sector using AI-driven threat intelligence. Electronics, 10(3), 239. https://doi.org/10.3390/electronics10030239
Hu, Z., Li, C., Cao, Y., Fang, B., He, L., & Zhang, M. (2014). How smart grid contributes to energy sustainability and regulatory compliance. Renewable and Sustainable Energy Reviews, 54, 123–135. https://doi.org/10.1016/j.rser.2016.03.039
Jørgensen, B. N., & Ma, Z. G. (2026). Cybersecurity and resilience of smart grids: A review of critical energy infrastructure protection. Applied Sciences, 16(2), 981. https://doi.org/10.3390/app16020981
Karkhi, M. I. A., et al. (2025). Legal obligations and communication challenges associated with securing smart grid networks. ISA Transactions, 156, 1–15. https://doi.org/10.1016/j.isatra.2025.01.005
Keller, T., Warwas, J., & Guggemos, J. (2026). Regulating information and network security: Review of smart grid challenges and future research directions. Reliability Engineering & System Safety, 265, 112318. https://doi.org/10.1016/j.ress.2026.112318
Kreso, I. (2024). Cyber threats and vulnerability mapping in the energy sector: Laying the groundwork for NERC CIP and NIS2 alignment. Advanced Cybersecurity and Information Governance Journal, 5(2), 112–128. https://doi.org/10.60097/ACIG/211124
Krzykowski, M. (2021). Legal aspects of cybersecurity in the energy sector—Current state and latest proposals of legislative changes by the EU. Energies, 14(23), 7836. https://doi.org/10.3390/en14237836
Leszczyna, R. (2018). A review of standards with cybersecurity requirements for smart grid. Computers & Security, 77, 262–276. https://doi.org/10.1016/j.cose.2018.03.011
Liatifis, A., et al. (2020). ELECTRON: An architectural framework for securing the smart grid. IEEE Transactions on Circuits and Systems II: Express Briefs, 68(1), 1–5. https://doi.org/10.1109/TCSII.2020.3020139
Lin, W. C., & Saebeler, A. (2023). Risk-based v. compliance-based utility cybersecurity: The case of NERC CIP. Electricity Journal, 36(1), 45–58. https://doi.org/10.1109/CPRE.2011.6035634
Markopoulou, D. (2021). The regulatory framework for the protection of critical infrastructures. Computer Law & Security Review, 39, 105502. https://doi.org/10.1016/j.clsr.2020.105502
Marron, J., et al. (2019). Cybersecurity framework smart grid profile (NIST Technical Note 2051). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.TN.2051
Musleh, A. S., Chen, G., & Dong, Z. Y. (2024). Cybersecurity challenges in renewable-dominated power systems: NERC CIP standards and protocol gaps. Cell Reports Physical Science, 5(3), 101845. https://doi.org/10.1145/3678260
National Academies of Sciences, Engineering, and Medicine. (2018). The future of electric power in the United States. The National Academies Press. https://doi.org/10.17226/24836
Owusu, S. (2021). The rising threat: Cybersecurity risks in critical energy infrastructure and legal mandates. Global Energy Perspectives, 12(4), 88–102. https://doi.org/10.1109/IT51528.2021.9390103
Paul, B., Sarkar, A., Abhi, S. H., Das, S. K., Ali, M. F., Islam, M. M., Islam, M. R., Moyeen, S. I., Badal, M. F. R., Ahamed, M. H., Sarker, S. K., Das, P., Hasan, M. M., & Saqib, N. (2024). Potential smart grid vulnerabilities to cyber attacks: Current threats and existing mitigation strategies. Heliyon, 10(19), e37980. https://doi.org/10.1016/j.heliyon.2024.e37980
Pavel, T. (2026). Cybersecurity and the Slovenian electrical grid: Legal strategies for defending critical energy infrastructure. Bratislava Law Review, 10(1), 45–62. https://doi.org/10.3390/jcp3040031
Petrilean, D. C. (2025). Integrated strategies for smart grid management: NERC CIP standards and supply chain vulnerability reporting. Preprints, 202511, 0878. https://doi.org/10.20944/preprints202511.0878.v1
Pieroni, A., et al. (2023). Grid-friendly interaction with smart grid: Legal and regulatory requirements. Energy, 284, 129298. https://doi.org/10.1016/j.energy.2023.129298
Rashid, M. M., Mosarat, Z., Habib, A. A., Ghosh, A., Rahman, K. S., Sultan, S. M., Tso, C. P., Shan, T. W., Islam, A., & Rokonuzzaman, M. (2025). A comprehensive review of cybersecurity challenges and resilience strategies in renewable energy integration with battery storage for sustainable smart grids. Results in Engineering, 29, 108557. https://doi.org/10.1016/j.rineng.2025.108557
Rubio, S., et al. (2025). Smart grid protection, automation and control: Challenges and legal compliance with NERC CIP and IEC 62351. Applied Sciences, 15(6), 3186. https://doi.org/10.3390/app15063186
Ruland, K. C., Sassmannshausen, J., Waedt, K., & Zivic, N. (2017). Smart grid security – an overview of standards and guidelines. e & i Elektrotechnik und Informationstechnik, 134, 19–25. https://doi.org/10.1007/s00502-017-0472-8
Sivakumar, E., et al. (2026). A systematic review on the current scenarios and future of AI-based security frameworks for smart grid cybersecurity. Information Retrieval Journal, 29(1), 1–28. https://doi.org/10.1007/s10791-026-10348-x
Suman, S., Aqib, M., & Khan, R. (2024). NERC CIP and IEC 62443: Inconsistencies and regulatory harmonization for smart grid security. Journal of Computer Science and Information Technology, 9(3), 45–60. https://doi.org/10.11591/aptikom.j.csit.93
Suorsa, M. (2026). Cybersecurity risks and defense for a European energy transition. Energies, 12(4), 725. https://doi.org/10.3390/en12040725
Szczepaniuk, E. K., et al. (2025). Cybersecurity of smart grids: Requirements, threats, and regulatory mandates for critical energy infrastructure. Energies, 18(18), 5017. https://doi.org/10.3390/en18185017
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Ch Amir Shahzad (Author)
This work is licensed under a Creative Commons Attribution 4.0 International License.
