President Trump has issued a new executive order aimed at protecting the US power grid from foreign-backed vulnerabilities. The move marks a significant shift in strategy, focusing on mitigating upstream supply chain risks rather than solely targeting state-sponsored actors like China.
The order attributes the heightened emergency status to the rapid growth of critical infrastructure, including data centers, AI, advanced manufacturing, and defense production. As dependence on grid reliability increases, so too does the impact of foreign supply chain disruptions or targeted attacks that exploit built-in backdoors for remote access. To address this concern, the new directives prohibit the acquisition, import, transfer, or installation of foreign-produced bulk-power equipment initiated after August 26, 2026, if it involves designated entities.
The order specifically targets critical infrastructure operating bulk-power system transmission lines rated at 69 kilovolts or higher, excluding local electricity distribution facilities. Designated technologies include transformers, inverters, energy storage systems, and industrial control systems (ICS) such as remote terminal units (RTUs), programmable logic controllers (PLCs), and safety systems. The order also covers associated firmware, software, and remote access capabilities.
While the focus is often on state-sponsored Chinese actors targeting US power grid networks through active intrusions, these directives signal a shift toward mitigating upstream supply chain risks and embedded hardware backdoors. For equipment installed prior to the new executive order, the Energy Department can mandate security controls, requiring grid operators to identify, isolate, monitor, secure, disconnect, or replace certain components to neutralize operational threats.
The implications of this move are significant, as it highlights a growing recognition within the US government that embedded hardware vulnerabilities pose a substantial risk to national security. By targeting upstream supply chain risks, the executive order aims to prevent foreign entities from exploiting built-in backdoors for remote access, sabotage, or malicious operation. While the order does not name any country, its structure closely mirrors a 2020 Trump-era bulk-power order that led to a DOE prohibition order explicitly targeting entities associated with China.
To support ongoing grid operations, energy authorities may negotiate mitigation agreements or publish an official list of pre-qualified equipment and vendors exempt from baseline prohibitions. This move underscores the need for robust security controls and supply chain risk management within the US power grid industry.
In practical terms, this executive order means that organizations operating in the US power grid sector must be vigilant about their supply chain risks and take proactive steps to mitigate potential threats. By understanding the implications of this new directive, industry professionals can better protect themselves against upstream vulnerabilities and ensure the reliability and security of critical infrastructure.
Source: SecurityWeek — 2026-08-27