The Guam Power Authority has been awarded an additional $1,765,986 in federal funding to strengthen its cybersecurity posture and protect Guam’s critical energy infrastructure.
The grant comes through a subaward agreement facilitated by the American Public Power Association in partnership with the U.S. Department of Energy under the Industrial Control Systems (ICS) CyberShield (CR15) program. The initiative supports public power utilities in deploying advanced cybersecurity technologies and improving resilience against evolving threats.
Enhancing Grid Security
GPA General Manager John M. Benavente said the award reflects the agency’s continued effort to stay ahead of cyber risks.
Cybersecurity has been a priority "since we implemented our DOE-approved cybersecurity plan in 2014,” Benavente said, noting that GPA works closely with federal authorities to address increasingly sophisticated threats.
Assistant General Manager of Engineering and Technical Services John J. Cruz Jr. said GPA’s cybersecurity framework aligns with national standards, including the NIST Cybersecurity Framework, NIST Special Publication 800 series guidelines and applicable NERC CIP standards.
He added that GPA’s cybersecurity personnel hold specialized certifications, including Global Industrial Cyber Security Professional (GICSP), and that both information technology (IT) and operational technology (OT) systems are covered under its security program.
Technology Upgrades Underway
Chief Information Technology Officer Melvyn Kwek said that since joining APPA’s CR15 program in 2024, GPA has deployed multiple cybersecurity enhancements, with more in progress.
Ongoing upgrades include network infrastructure improvements, OT sensor deployments, Security Operations Center services, additional security applications for the OT network and expanded information-sharing capabilities.
Supporting a Resilient Energy Future
Federal officials define a resilient grid as one capable of withstanding physical and cyberattacks without massive blackouts or high recovery costs. GPA said cybersecurity remains a key component of its Smart Grid Program and broader clean energy transition.
The utility emphasized that protecting digital infrastructure is essential to delivering reliable, secure and sustainable power to Guam residents and businesses.