Resources

CASE STUDY: Energy and Utilities Physical Security at Scale

Written by securithings | Oct 8, 2026, 3:45:40 PM

NERC's 2025 ERO Reliability Risk Priorities Report identified physical and cybersecurity complexity as an urgent threat facing the grid, warning that sophisticated physical vulnerabilities are increasingly exploited alongside digital ones. This case study covers how two energy operators brought remote automation to dispersed, safety-critical device fleets that a small team now monitors and maintains.

Key Takeaways

  • Why the scale and geographic spread of controllers, cameras, and access points across substations, plants, and rights-of-way turns every manual device touch into a safety operation on live power infrastructure
  • How one operator eliminated unnecessary truck rolls across a 450+ controller fleet with remote bulk firmware upgrades, automated offline reports, and remote restarts — freeing CSOC operators from manual camera checks to focus on real alarms
  • How another operator moved from hand-rotating firmware and passwords across 8,000 devices to automated fleet-wide rotation, detailed per-device vulnerability listings, and a full inventory after orphan cleanup
  • What continuous device control looks like when it meets the threat picture NERC describes — a device layer that catches up to the sophistication of attacks against the grid

Read this if…

You're responsible for physical security, OT, or operations at an energy or utility operator managing dispersed, safety-critical device fleets — and the gap between what a small team can manually maintain and what the threat picture now demands is growing.