Trump EO bans bulk-power equipment above 69kV from foreign vendors over remote access risks

The order tasks Commerce, Energy, and Defense with transaction reviews and creates a pre-qualified vendor list within 120 days. Agencies must inventory at-risk installed equipment and submit replacement plans. No specific countries are named, but the text flags supply-chain disruptions and digital backdoors as the core concern. Technical scope covers substations, control rooms, generators, and reactors.

Prior orders on Huawei, Kaspersky, and Chinese inverters followed similar procurement-record patterns rather than disclosed incident forensics. Here the evidence trail is limited to CISA alerts on OT exposures and NSA/FBI notes on AI-assisted scanning of water and energy assets; no public packet captures or malware samples tie specific foreign firmware to the banned voltage classes. Official statements cite Iranian, Russian, and Chinese actors, yet independent attribution remains absent.

The gap missed by initial coverage is the 120-day rulemaking window and the replacement-cost exemption clause, which will determine whether utilities can retain existing Chinese or Russian transformers already in the grid. Pattern match to the 2020 bulk-power emergency order shows delayed enforcement until vendor lists and domestic alternatives were secured.

Next steps include the interagency list of scrutinized countries and mandatory reporting of current at-risk deployments. Utilities with equipment from vendors later added to the list face isolation or replacement mandates.