DOE-417 Reporting Portal Has Moved

DOE-417 Reporting Portal Has Moved

Please Update Reporting Bookmarks

The U.S. Department of Energy (DOE) has moved the Electric Emergency Incident and Disturbance Report (Form DOE-417) to a new site hosted by Pacific Northwest National Laboratory: https://doe417.pnnl.gov/. The legacy page on energy.gov is now obsolete.

What is the DOE-417 Form?

NERC and the DOE require specified system events to be reported within 24 hours (or by next business day if event occurs on a weekend or holiday).  Reportable occurrence thresholds are defined in NERC Standards CIP-003, CIP-008, and EOP-004.  The information collected from mandatory reporting helps the DOE fulfill obligations for national security and other energy emergency situations on the United States’ electric energy supply systems.  For example, if an entity reports a cyber-attack on its infrastructure, the DOE collects that data and immediately analyzes the event to determine if this is an isolated occurrence or has potential for widespread ramifications.  By requiring an entity to report within the 24-hour timeframe, the DOE is able to mobilize resources and mitigate potential threats/disturbances.  Furthermore, the data collected by the DOE can be used to develop legislative recommendations, reports to Congress, as well as initiatives for future NERC Standards.

Using the New DOE Portal:

• Training mode: A new Training button lets you practice filling out the form online without submitting it.  This is ideal for drills and tabletop exercises.
• Two ways to file: If a real report is created, complete and submit the form entirely online or download the fillable PDF and transmit it using normal channels.

Documents That May Require Updating:

• Event Reporting Operating Plan (EOP-004-4) – applies to all registrations except DP-UFLS.
• For entities with low-impact BES Cyber Systems: Cyber Security Incident Response Plan – CIP-003 R2.
• For entities with medium or high-impact BES Cyber Systems: Cyber Security Incident Response Plan – CIP-008.

Immediate Actions for You:

1. Bookmark the new DOE-417 portal and forward the link to your incident response and compliance teams.
2. Encourage relevant staff to explore the Training feature for hands-on practice.
3. For USV Routine Services clients, watch for the updated plans from USV. Sign and return them at your earliest convenience.

Questions? Just let US know! We’re here to help.