Google Cloud and E-ISAC team up to advance security in the electricity industry

Power generation and distribution networks are essential to modern life and must keep pace with dramatically increasing demand for electricity. The Energy sector is uniquely critical because it enables all other critical infrastructure sectors. Without reliable and secure electricity networks, economies and communities cannot function.

Cybersecurity is particularly important for energy and utility companies because they face the challenges of protecting vast supply chains, electricity grids, and customer information against myriad malign actors. The energy sector must contend with cyberattacks that include ransomware, supply chain compromise, botnets, and worm attacks. These significant threats emanate from state actors, quasi-state organizations, and terror groups who all see electricity infrastructure, companies, and their systems as valuable targets.

To enhance our commitment for this sector, today we are announcing a new partnership with the Electricity Information Sharing and Analysis Center (E-ISAC). Google Cloud is proud to be the first leading cloud provider to join the E-ISAC Vendor Affiliate Program.

By joining E-ISAC as a vendor affiliate, Google Cloud will contribute to the electricity industry’s collective defense by providing subject matter expertise on critical vulnerabilities and security solutions. In its role as a Vendor Affiliate Program partner, Google Cloud will devote resources and experts to work alongside industry leaders to transform, secure, and defend the electricity sector.

E-ISAC, in collaboration with the U.S. Department of Energy (DOE) and the Electricity Subsector Coordinating Council (ESCC), serves as the primary security communications channel for the electricity industry and enhances the industry's ability to prepare for and respond to cyber and physical threats, vulnerabilities, and incidents. E-ISAC aggregates and analyzes security data to share with stakeholders, coordinates incident management, and communicates mitigation strategies to reduce cyber and physical security risks to the electricity industry across North America.

“Partnering with E-ISAC is a critical step in our commitment to help the energy sector transform and secure its critical infrastructure and is aligned with the US Government’s grid modernization and critical infrastructure security priorities,” said Phil Venables, VP and CISO Google Cloud. “As one of the world's largest tech providers, we believe we have a responsibility to share our expertise and resources with organizations that are working to protect the energy grid and critical infrastructure. This partnership will help us to raise awareness of the security threats facing the energy sector and to develop new solutions to help address these threats.”

As a Vendor Affiliate Program partner, Google Cloud will bring experts and resources — including unique insights from Mandiant, our Threat Horizon reports, and the Google Cybersecurity Action Team — to help the electricity industry protect against cyberattacks. Googlers will work with defenders and leaders in the power and energy sector, sharing knowledge we’ve learned building and deploying secure technology at Google.

This partnership is a continuation of Google’s August 2021 commitment to invest at least $10 billion over five years to advance cybersecurity. This same commitment has enabled us to join other organizations like Health ISAC and Financial Services ISAC, so we can continue to support the security and resilience of our critical infrastructure across key sectors.

“The E-ISAC is pleased to welcome Google Cloud as a Vendor Affiliate Program partner,” said Manny Cancel, NERC SVP and CEO of the E-ISAC. “Our partnership with Google Cloud is a significant and positive step in furthering collaboration between industry and vendors as we work together to reduce risk around supply chain interdependencies and strengthen our collective defense.”

Learn more

For more information on Google Cloud’s E-ISAC partnership, please visit the Google Cybersecurity Action Team page.