WILMINGTON, N.C.—Electric cooperatives got a bevy of help to build their cyber support team from a key lineup at the recent Cooperative Technologies Conference & Expo hosted by North Carolina’s Electric Cooperatives.

“The key takeaway is to establish partnerships with these people right here ahead of time,” Justin Luebbert, NRECA senior manager of cybersecurity, told attendees at a panel discussion with cyber officials from the FBI, the Department of Homeland Security, the state Department of Public Safety and North Carolina co-ops. “You never know when you’re going to get that call. Be proactive. It goes a long way.”

Luebbert outlined NRECA’s resources, including Co-op Cyber Goals, the annual Co-op Cyber Tech event, Cyber Mutual Assistance Program and Project Guardian, which will identify regional “cyber champions” and categorize levels of cybersecurity resources to help co-ops obtain the right-sized tools. 

“We want no co-op left behind,” said Luebbert. “We’re working on establishing Project Guardian to create cybersecurity communities all across the country for co-ops no matter their size.”

FBI Special Agent Rayna Wells said co-ops should include the bureau in their cybersecurity incident response plan. Once contacted, the FBI will respond in a matter of hours. She also recommended joining InfraGard, the FBI’s nonprofit that provides cyberthreat details and space for impacted sectors to share threat information.

“That is extremely valuable for critical infrastructure sectors,” she said. 

 Rob Main, cybersecurity state coordinator under DHS, encouraged co-ops to sign up for their state or regional Information Sharing and Analysis Center supported by Cybersecurity and Infrastructure Security Agency at DHS.

“Information sharing is absolutely essential when in midst of a dark-sky day,” he said “Today, you share on your dark-sky day; tomorrow, you might benefit from information shared by someone else on their dark-sky day.”

CISA also provides free network penetration tests and vulnerability scanning.

“Nation-states might want to embed in your infrastructure,” Main told the group. “If you know what your enemy is interested in, you’ll succeed in battle.”

Chris Chappell, cyber operations specialist for emergency management for the North Carolina Department of Public Safety, urged co-ops to stay in touch with their state officials who communicate with other utilities and sectors about cyberthreats.

Brian Burnett, director of cybersecurity for Raleigh-based North Carolina’s Electric Cooperatives, echoed that call and told co-op professionals about a statewide advisory group he started for sharing tools, resources and information on the latest threats. All 26 of the state’s electric co-ops participate.

“It keeps relationships and contacts strong,” he said. Burnett also suggested that IT and cyber staff routinely talk with their co-op leadership about their cybersecurity activities and challenges.

“It’s easier to get support because we are having those conversations,” he said. “Those conversations make a huge difference.”