Electric Grid Supply Chain Security Act

Summary#

The Electric Grid Supply Chain Security Act would create a new federal law. It would require the Secretary of Defense to prepare a plan for certain equipment and computing facilities in the U.S. electric grid that are owned or controlled by a foreign adversary. Its stated goal is to identify, prioritize, and plan ways to address those items; the bill does not itself require their removal or replacement.

  • Within 180 days after enactment, the Secretary must submit the plan to congressional defense committees, coordinating with the commander of U.S. Northern Command and the military department secretaries, and consulting the Secretary of Energy.
  • The plan must assess national defense and security risks, set priorities based on risk to military operations, and describe a strategy—coordinated with relevant states—to remove, replace, or otherwise mitigate covered items while minimizing disruption to grid operations.
  • The plan must include ways to use secure alternatives, including weapons protection, standard manufactured components, and software. It must meet standards cited in the bill, which the bill does not explain.
  • The Secretary must issue guidance within 90 days to further define “covered computational facility” and, as appropriate, update that guidance at least annually.
  • Starting with the fiscal year 2028 budget cycle, the Northern Command commander must send the Secretary and congressional defense committees an annual budget estimating the funding needed to carry out the plan.

What it means for you#

  • Defense Department and military leaders: The bill would give them duties to develop the plan, issue and update guidance, and provide annual funding estimates.
  • State governments: The remediation strategy must be coordinated with relevant states. The bill does not set out how that coordination would work.
  • Electricity providers, businesses, and the public: The bill does not directly require private companies or other owners to remove equipment, change operations, or pay fees. Any effects on them would depend on the plan and any later action.
  • General public: This is a Senate bill that has not become law. It creates a planning requirement, not an immediate grid-removal program, ban, or new front-line service.

Money#

No cost estimate is in the available material.

  • The bill requires an annual estimate of funding needed to carry out the plan, beginning with the fiscal year 2028 budget cycle.
  • It does not appropriate money or state how much the plan, its preparation, or any later remediation would cost.

What is unclear#

  • The bill does not explain the standards it cites for identifying or addressing covered items.
  • The Secretary must further define “covered computational facility” in guidance; the bill does not set the limits of that definition.
  • The bill describes covered equipment using several criteria, including network connection, remote access or update capability, and possible network or physical access. It does not explain how those criteria will be applied in particular cases.
  • The bill does not set out how owners or operators would be identified, notified, or involved, or whether they could challenge a decision.
  • It does not specify who would carry out or pay for remediation, or set a deadline for completing it.
  • The bill refers to existing legal definitions for “foreign adversary” and “control”; their full wording is not included in the supplied material.

Case for#

  • A possible argument for the bill is that equipment or computing facilities linked to a foreign adversary could pose risks to military installations, defense operations, or grid reliability. The plan is meant to assess those risks.
  • Setting priorities by risk to military operations could focus attention on the most critical infrastructure first.
  • Requiring coordination with states and a strategy to minimize disruption could help account for grid operations while planning changes.
  • Requiring annual funding estimates could give Congress information for deciding whether and how to fund later work.

Case against#

  • The bill requires a plan, but does not require that equipment be removed, replaced, or mitigated. A plan alone may not address the risks it identifies.
  • It does not provide funding or say who would pay for any later work, leaving the scale and affordability of remediation uncertain.
  • Key details depend on future guidance and standards that the bill does not explain, so the scope of covered facilities and the practical rules are not yet clear.
  • The bill does not spell out how affected owners or operators would take part in decisions, or what process would apply if they dispute a finding.