Changeflow GovPing Energy Hydropower Cybersecurity Guidance Section 9.0 R...
Priority review Consultation Amended Consultation

Hydropower Cybersecurity Guidance Section 9.0 Revised, Comments Sought

Favicon for www.regulations.gov Regs.gov: Federal Energy Regulatory Commission
Published
Detected
Email

Summary

The Office of Energy Projects (OEP) staff has revised Section 9.0 of the Security Program for Hydropower Guidance to modernize cybersecurity practices at licensed hydropower projects, reflecting technological advancements and lessons learned through recent inspections and audits. The revised guidance updates definitions, applicability criteria, and technical measures used to evaluate and protect cyber and control-system assets. FERC requests public input from hydropower owners, operators, federal and state agencies, and other interested parties with cybersecurity expertise by May 18, 2026 at 5:00 PM Eastern Time.

Published by FERC on regulations.gov . Detected, standardized, and enriched by GovPing. Review our methodology and editorial standards .

About this source

Every Federal Energy Regulatory Commission document on regulations.gov, the federal rulemaking portal: tribal consultation notices, combined filings of electric rate applications, pipeline environmental reviews, LNG certificate proceedings, and the procedural rules that shape FERC practice. Around 150 a month. This complements FERC's eLibrary docket system by carrying the higher-visibility proceedings with public comment periods. Watch this if you intervene in FERC cases, advise pipeline developers on certificate proceedings, follow transmission planning under Order 1920, or track the LNG export authorization work. GovPing publishes each posting with the docket, document type, and comment deadline where applicable.

What changed

FERC's Office of Energy Projects has published revised Section 9.0 of the Security Program for Hydropower Guidance, which updates cybersecurity requirements for licensed hydropower projects. The revisions modernize definitions, applicability criteria, and technical measures for protecting cyber and control-system assets, incorporating lessons learned from recent inspections and audits.

Hydropower owners and operators, as well as federal and state agencies with expertise in cybersecurity implementation, should review the revised guidance and submit comments by May 18, 2026. While the guidance is non-binding, it reflects current inspection findings and shapes compliance expectations for critical infrastructure cybersecurity. Comments may be submitted via FERC Online (eComment or eFiling) or by mail.

Archived snapshot

Apr 23, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Content

The staff of the Office of Energy Projects (OEP) has revised Section 9.0 of its Security Program for Hydropower Guidance (Guidance) to modernize the Commission's existing guidance for cybersecurity practices at licensed projects. The Section 9.0 revisions
reflect technological advancements and lessons learned through recent inspections and audits. The revised Section 9.0 Guidance updates definitions, applicability criteria, and the technical measures used to evaluate and protect cyber and control-system
assets. The staff is asking for public input and suggestions for modifications to the Section 9.0 revisions of the Guidance from hydropower owners and operators, federal and state agencies, and other interested parties with expertise in the implementation
of cybersecurity practices. The more specific your comments, the more useful they will be. Please note that this comment period
will close on Monday, May 18, 2026, 5:00 p.m. Eastern Time.

The revised Section 9.0 Guidance may be accessed on the Commission's website via eLibrary | General search. Select “General Search” and enter the docket number
(AD26-6) in the docket number field to access the document. For assistance, please contact FERC Online Support at FercOnlineSupport@ferc.gov, toll free at (866) 208-3676, or for TTY, contact (202) 502-8659.

For your convenience, there are three methods you can use to submit your comments to the Commission. In all instances, please
reference the docket number (AD26-6-000) with your submission.

  1. You can file your comments electronically using the eComment feature on the Commission's website (www.ferc.gov) under the link to FERC Online. This is an easy method for submitting brief, text-only comments;

  2. You can file your comments electronically by using the eFiling feature on the Commission's website (www.ferc.gov) under the link to FERC Online. With eFiling, you can provide comments in a variety of formats by attaching them as a file
    with your submission. New eFiling users must first create an account by clicking on “eRegister.” Please select “Comment on
    a Filing” as the filing type; or

  3. You can file a paper copy of your comments by mailing them to the Commission. Submissions sent via the U.S. Postal Service
    must be addressed to: Debbie-Anne A. Reese, Secretary, Federal Energy Regulatory Commission, 888 First Street NE, Room 1A,
    Washington, DC 20426. Submissions sent via any other carrier must be addressed to: Debbie-Anne A. Reese, Secretary, Federal
    Energy Regulatory Commission, 12225 Wilkins Avenue, Rockville, Maryland 20852.

In addition, the Commission offers a free service called eSubscription that allows you to keep track of all formal issuances
and submittals in specific dockets. This can reduce the amount of time you spend researching proceedings by automatically
providing you with notification of these filings, document summaries, and direct links to the documents. Go to https://www.ferc.gov/ferc-online/overview to register for eSubscription.

Dated: April 17, 2026. Debbie-Anne A. Reese, Secretary. [FR Doc. 2026-07837 Filed 4-21-26; 8:45 am] BILLING CODE 6717-01-P

Download File

Download

Named provisions

Section 9.0

Get daily alerts for Regs.gov: Federal Energy Regulatory Commission

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from FERC.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Classification

Agency
FERC
Published
April 17th, 2026
Comment period closes
May 18th, 2026 (25 days)
Compliance deadline
May 18th, 2026 (25 days)
Instrument
Consultation
Branch
Executive
Legal weight
Non-binding
Stage
Consultation
Change scope
Substantive
Docket
AD26-6-000

Who this affects

Applies to
Energy companies Government agencies
Industry sector
2210 Electric Utilities
Activity scope
Cybersecurity practices Control system protection Hydropower security
Geographic scope
United States US

Taxonomy

Primary area
Cybersecurity
Operational domain
Compliance
Compliance frameworks
NIST CSF
Topics
Energy Critical Infrastructure

Get alerts for this source

We'll email you when Regs.gov: Federal Energy Regulatory Commission publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!