Not surprising at all. Click Read More below.
Inverters are computers that run software to transform DC into AC power usually with some type of phase loop control functions to ensure proper frequency. A large number of these resources/Inverters are accessible via the Internet and there are no cybersecurity standards for these inverters, that I’m aware of. Like all software, they may contain exploitable vulnerabilities.
However, attempts have been made in the past to create cybersecurity standards for DER communications which failed to pass, but this responsibility is laregely the responsibility of State’s who control generator interconnection and resource adequacy needs to decide. The bottom line is: This is a State issue related to interconnection policies.
It’s also worth mentioning that NERC has issued Level 3 alert for Inverter based resources.
