Trump Order Aims to Block Foreign Backdoors in US Power Grid Gear
Trump order targets foreign-supplied electrical equipment for US power grid.
Run industrial control systems?
Get an email when a reviewed story names industrial control systems, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
President Trump has issued Executive Order 14420, declaring a national emergency to address vulnerabilities in the US bulk power system stemming from foreign-supplied electrical equipment. The order prohibits the acquisition, import, transfer, or installation of foreign-produced bulk-power equipment from designated entities after August 26, 2026, if it poses risks of sabotage or unauthorized access. It covers critical infrastructure transmission lines and specific industrial control systems, signaling a shift towards mitigating upstream supply chain risks and embedded hardware backdoors.
The lesson from this incident
Full lessonExecutive Order 14420 highlights the systemic risk posed by foreign-manufactured hardware embedded within critical national infrastructure, where backdoors or sabotage capabilities may be introduced long before equipment ever reaches an operational environment. Unlike software vulnerabilities that can often be patched, hardware-level backdoors in industrial control systems and grid components are extraordinarily difficult to detect and remediate after deployment. This underscores that supply chain risk is not merely a procurement concern — it is a national security issue with potentially catastrophic consequences for public safety and economic stability. Organizations operating critical infrastructure must recognize that trust cannot be assumed based on vendor reputation alone, and that verification, vetting, and ongoing monitoring of physical components are essential security disciplines.
What helps against this
How we list vendors- Cyber asset inventory
You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.
- OT and industrial control system security
Factory, building and utility control systems get visibility and protection.
- Third-party risk management (TPRM)
You know which suppliers could hurt you, and you hear quickly when one of them is breached.