New US Order Restricts Foreign Equipment in Critical Power Infrastructure
A U.S. executive order targets high-risk foreign equipment in the electrical grid to prevent cybersecurity vulnerabilities and potential disruption by adversaries exploiting hardware vulnerabilities and remote-access capabilities. The restrictions apply to large-scale generation, transmission, and control equipment operating at 69 kilovolts or higher, including transformers, inverters, circuit breakers, and industrial control systems. Implementing rules from the Department of Energy, expected by December 2026, will clarify which vendors and specific products face restrictions.
The executive order specifically targets equipment operating at 69 kilovolts and above, a threshold that captures major infrastructure components while excluding smaller residential and commercial systems. The Department of Energy has until late December 2026 to establish the actual implementation framework, which could take multiple forms ranging from outright vendor prohibitions to approved supplier lists. This timeline means utilities currently face uncertainty while making procurement decisions.
The order's scope extends beyond finished products to examine entire supply chains, meaning even Western manufacturers could face restrictions if they incorporate critical components from adversarial nations. This represents a significant shift in how compliance will be measured—companies must now document the origin of subcomponents rather than simply certifying where assembly occurred. U.S. utilities have already begun requesting detailed supply chain documentation from vendors in anticipation of the forthcoming rules.
The restrictions may substantially reshape the power equipment industry by forcing vendors to restructure supply chains and potentially fragmenting global markets. Utilities face potential operational disruptions during compliance transitions and may experience higher costs if alternatives are limited. However, the policy's effectiveness depends heavily on the implementing rules' specificity and enforcement mechanisms. The 2020 predecessor order produced minimal tangible restrictions, raising questions about whether this iteration will achieve meaningful security improvements or create primarily administrative burdens for the sector.