Question to the Department for Energy Security & Net Zero:

To ask the Secretary of State for Energy Security and Net Zero, what powers and resources DESNZ and Ofgem will have to enforce cyber security standards on energy operators under the Cyber Security and Resilience Bill, including smart energy controllers, battery storage optimisers and large load controllers; and what the timetable is for implementation.

The Cyber Security and Resilience Bill will introduce load control as an essential service under the Network and Information Systems Regulations. DESNZ and Ofgem will jointly regulate load controllers managing at least 300MW across relevant energy smart appliances, including battery storage, electric vehicles, heating appliances and virtual power plants. Operators must take appropriate and proportionate security measures and report significant incidents. Compliance and enforcement will be supported by tailored Cyber Assessment Framework profiles and guidance, on which the Government recently consulted. The consultation response will be published in late November. Implementation will follow Royal Assent and secondary legislation.