Eight companies providing operational control technologies for the energy sector have signed on to a Group of Seven (G7) pledge to abide by a series of cybersecurity principles according to Anne Neuberger, Deputy National Security Advisor for Cyber and Emerging Technology.
The Supply Chain Cybersecurity Principles were developed through a public-private collaboration between the Department of Energy’s (DOE) Office of Cybersecurity, Energy Security, and Emergency Response (CESER) and the pledge’s signatories, which include Schneider Electric, GE Vernova, Hitachi Energy, Honeywell, Schweitzer Engineering Laboratories, Rockwell Automation, and Siemens Energy.
The G7 is releasing the pledge against the backdrop of Russian attacks on Ukrainian energy infrastructure during its invasion and rising tensions with China, which is prepositioning itself in the critical infrastructure of the U.S. and its Indo-pacific allies.
It also comes as several governments advocate for industry to adopt a secure by design approach through voluntary cybersecurity principles for software development, deployment, and use. This includes the Cybersecurity and Infrastructure Security Agency’s (CISA) Secure By Design Pledge, which currently has 145 signatories, and the United Kingdom Department for Science, Innovation and Technology’s (DSIT) Code of Practice for Software Vendors, which is currently receiving comments through August 9.
The document released by DOE CESER includes a total of 10 principles, accompanied by mirrored, high-level descriptions of how they apply to “suppliers” (i.e., pledge signatories) and “end users” (i.e., energy utilities):
- Impact-Driven Risk Management
- Framework Informed Defenses
- Cybersecurity Fundamentals
- Secure Development & Implementation
- Transparency & Trust Building
- Implementation Guidance
- Lifecycle Support & Management
- Proactive Vulnerability Management
- Proactive Incident Response
- Business & Operational Resilience
Moving forward, the White House will host a “second phase” of the agreement aimed at bringing together government stakeholders and private sector companies from G7 nations to share “threat intelligence and doubling down on how companies will implement these cybersecurity principles.”
Read Next
European Commission 2028-2034 Budget Proposal Includes Substantial Increase for Cyber, Digital Programmes
The European Commission presented its initial proposal for the European Union’s 2028-2034 financial framework that, if approved, could authorise nearly EUR 2 trillion in spending over seven years for cyber and other digital efforts.
Congress’ Proposed Chip Security Act Threatens to Create New Cyber Vulnerabilities in U.S. Semiconductors
As the U.S. races toward global AI dominance, a new bill aimed at preventing diversion of innovative U.S. semiconductors to China could inadvertently make those very same chips less secure.
Japanese Regulator Balances Cybersecurity, Competition Concerns In MSCA Implementation Guidelines
Promoting robust competition in the digital space while ensuring cybersecurity protections is challenging. The Japan Fair Trade Commission strikes a crucial balance between these priorities in its May 2025 guidelines.
