No disaster necessary. NERC CIP regulations have been in place (and enforced) at electric utilities since 2007:<p>&quot;In 2007, FERC designated NERC the ERO in accordance with Section 215 of the Federal Power Act, enacted by the Energy Policy Act of 2005. Upon FERC’s approval, NERC’s Reliability Standards became mandatory within the United States. These mandatory Reliability Standards include CIP standards 001 through 009, which address the security of cyber assets essential to the reliable operation of the electric grid.&quot;<p>Source: <a href="http:&#x2F;&#x2F;www.nerc.com&#x2F;pa&#x2F;CI&#x2F;Comp&#x2F;Pages&#x2F;default.aspx" rel="nofollow">http:&#x2F;&#x2F;www.nerc.com&#x2F;pa&#x2F;CI&#x2F;Comp&#x2F;Pages&#x2F;default.aspx</a><p>(Edit: clarification)