President Trump signed Executive Order 14420, "Declaring a National Emergency to Secure the United States Bulk-Power System," on August 26, 2026, invoking the International Emergency Economic Powers Act to bar acquisition of foreign-produced equipment for transmission lines rated 69kV and above, substations, control rooms, generating stations, and reactors — plus the software and firmware that runs them where a foreign government retains remote access. The order gives the Secretary of Energy 120 days to publish implementing rules and identify which countries warrant particular scrutiny.
This is not a new idea. Trump issued a nearly identical order, EO 13920, in May 2020. Biden suspended it on his first day in office and DOE formally revoked the underlying prohibition order in April 2021, opting instead for a Request for Information rather than a binding ban, according to DOE's own account of that reversal. The new order is broader — it adds inverters, batteries, circuit breakers, and generators to the original's narrower transformer focus — but it inherits the same structural weakness: a declaration of emergency followed by a long runway before anyone knows what it actually prohibits.
The threat is real, and getting worse
The steelman case for this order is not hypothetical. CISA has been tracking a cyberattack campaign against water utilities across at least 12 states since late July 2026, with attackers modifying passwords on programmable logic controllers and locking out operators, according to reporting from The Record. The same week the order was signed, the federal government said it observed malicious activity targeting more than 100 internet-exposed systems in the water sector, and NSA and FBI separately warned about an AI-powered threat to operational technology used across energy, water, and agriculture. A British power plant reportedly went dark for four days after a cyberattack. Grid operators are also absorbing unprecedented new demand from AI data centers, which raises the stakes of any single point of failure. Given that context, treating the bulk-power system's supply chain as a national security question rather than a pure procurement one is defensible. A backdoored transformer or inverter sitting inside critical infrastructure for foreign governments to reach remotely is exactly the kind of low-probability, high-consequence risk that justifies pre-emptive federal action rather than waiting for an incident.
But the order does almost no work on its own
The problem is that EO 14420, like its 2020 predecessor, declares an emergency and then punts every operative decision to a rulemaking process that hasn't started. It names no countries — that determination is due within 120 days. It doesn't define which vendors, products, or ownership thresholds trigger the ban; the fact sheet asserts the threat but supplies no criteria beyond "national security risk" as determined case-by-case by the Secretary of Energy. Utility and manufacturer groups reacted accordingly: Edison Electric Institute offered cautious support for working with DOE on implementation, but the National Electric Manufacturers Association flagged that there's "a need for a lot more clarity around the covered entity concerns," particularly for software and digital components where country-of-origin is genuinely hard to pin down, per Utility Dive's reporting.
That ambiguity is not a minor drafting flaw — it's the same flaw that let the 2020 version die on arrival. An order this broad, covering everything from reactors to firmware, creates real compliance risk for utilities that have to make procurement decisions now without knowing what will be retroactively deemed prohibited in four months. China supplies more than 80% of certain grid components globally, including lithium-ion battery cells, per Utility Dive — meaning a poorly calibrated rule could create shortages or price spikes for equipment utilities need today, with no domestic substitute ready to fill the gap.
The fix is scope discipline, not more emergency powers
A proportionate response would front-load the specificity this order deferred: publish, alongside the emergency declaration, a concrete list of high-risk vendors and equipment categories — not a 120-day promise of one — so utilities can plan procurement immediately rather than freeze it. Congress and DOE should also build in a sunset or renewal review, since IEEPA emergencies have a documented history of persisting indefinitely once declared; there is no indication yet whether this order includes an expiration mechanism beyond the standard annual renewal requirement under the National Emergencies Act. Given that the last version of this policy was reversed within a year for lack of a workable implementation framework, the administration has every reason to get the rulemaking right this time rather than repeat a cycle where the emergency outlives the rule.
The security case for hardening bulk-power supply chains against foreign backdoors is sound and increasingly urgent given the water-sector attacks and AI-driven threat landscape. But a national emergency declaration that leaves "which countries" and "which equipment" as open questions for four months doesn't secure anything yet — it just signals intent. Execution, not signing ceremonies, is what determines whether this survives past the next administration.