The Michigan Public Service Commission (MPSC) seeks a contractor to review and update the physical and cybersecurity elements of the Michigan Energy Security Plan (MESP) and identify security-related actions the MPSC should conduct to develop staff capacity and improve the plan. The project is intended to enhance the MPSC's understanding, processes, plans, and overall posture with respect to energy sector security risks and will increase MPSC staff's understanding of security best practices and technologies.
The contractor will be responsible for seven primary tasks: (1) Review the existing MESP and deliver written feedback on how to enhance security components consistent with federal energy assurance/security plan guidance, NARUC cybersecurity guidance, Michigan's cybersecurity strategy, and relevant literature; (2) Review existing MPSC security rules (proposed Rule 506, existing Rule 205 for Electric Service, and Rules 24 and 45 for Gas Service) and provide written feedback on improvements; (3) Participate in up to six individual meetings with regulated electric and natural gas utilities to discuss security practices, observe staff interactions, identify security gaps, and provide written follow-up memoranda within 10 days of each meeting; (4) Provide three virtual security training sessions of no more than 60 minutes each to MPSC staff on topics to be determined collaboratively; (5) Lead approximately ten bi-weekly status update meetings of no more than 60 minutes each via Microsoft Teams; (6) Lead one meeting presenting project activities and findings to MPSC leadership of no more than 2 hours duration via Microsoft Teams; and (7) Identify all assigned personnel with names, titles, duties, and attached resumes.
Key dates include an issue date of December 12, 2022, inquiries due by December 22, 2022 at 12:00 PM (noon), inquiries response posted by December 29, 2022, proposals due January 12, 2023 by 3:00 PM, and an anticipated start date of February 1, 2023. The grant period runs from February 1, 2023 through May 31, 2023. Applicants must have experience with electric and natural gas utility information technology and operational technology systems, familiarity with energy sector-related physical and cybersecurity practices and guidance (including NERC-CIP, ES-C2M2, API Standard 1164, NIST CSF, and TSA Security Directives), familiarity with prevailing regulatory environments for utility security, and exposure to state energy security planning and guidance including U.S. DOE State Energy Security Plan Guidance and NASEO State Energy Assurance Guidelines.
Payment will be made through progress payments up to 85% of the total authorized budget upon submission of grant fund documentation and project expenditure reports, with the final 15% paid after project completion and approval of a final report. The total grant amount available is $75,000.00.