5 Concerning Reasons The U.S. Power Grid Is Vulnerable To Cyber
Attacks: Page 2 of 6  The Stuxnet worm was used in 2010 against
a nuclear research facility in Iran. It targeted a specific
industrial control system and was designed to alter the
programmable logic controller used to closely manage Iran's
nuclear enrichment program. The attack spread, infecting systems
globally. The North American Electric Reliability Cooperation
issued five mandatory standards and seven voluntary measures to
ensure that Stuxnet does not impact power generation facilities.
The majority of electric utilities that responded to the inquiry
indicated that they were complying with five mandatory Stuxnet
measures. Far fewer indicated that voluntary measures were being
implemented. Increased personnel screening was being conducted
and many utilities indicated that assessments were under way to
identify critical assets, the report found.