LUMA Energy operates Puerto Rico's entire transmission and distribution infrastructure - 52,000 miles of lines serving 1.5 million customers across the island. Formed in 2021 as a partnership between ATCO and Quanta Services, the company inherited aging grid assets and a disaster recovery mandate worth over $51 billion. The threat model here is clear: hurricane-prone geography, cascading outage risk, and the operational complexity of modernizing critical infrastructure under live-fire conditions. The tech stack reflects that reality - NERC CIP compliance, NIST Cybersecurity Framework alignment, and operational technology layers including ADMS, EMS, and AMI deployments that touch everything from smart meters to distributed generation integration.
The cybersecurity surface is broad and consequential. LUMA manages outage response systems, customer-facing digital tools like the Mi LUMA app, and a communications backbone spanning microwave RF, DMR, and cellular wireless networks. Distribution automation and grid modernization initiatives mean more networked endpoints, more attack vectors, and a regulatory environment that doesn't forgive lapses in NERC CIP posture. The workforce includes engineers, lineworkers, and technical specialists navigating both physical and digital resilience challenges - outage management isn't just IT ops, it's life-safety infrastructure with real-time stakes.
Scale matters: operations span 165,000 square miles and over 300 jurisdictions, leveraging parent company experience across 100 countries and nearly 50,000 combined employees. The work involves securing operational technology in a high-consequence environment where grid failures have immediate public impact, and where disaster recovery program management intersects directly with cyber resilience planning. This is infrastructure security where the grid, the threat landscape, and the recovery timeline are all moving targets.
