Grid Equipment Provenance Is Now Asset Register Data

Executive Order 14420 was signed on 26 August 2026 and started a 120-day clock at the US Department of Energy. The question it pushes into an operating business lands on whoever owns the asset register: which substation transformers, grid-connected inverters, protective relays and battery energy storage units on the estate were built by which manufacturer, in which country, running which firmware, reachable through which remote-access route. Grid equipment provenance sat in procurement files for twenty years; it is now a query someone runs against the asset register at short notice.

The query is unremarkable in IBM Maximo Manage: assets filtered by classification and manufacturer, returning serial number, install date and specification attributes. Whether it returns a defensible list or a fortnight in the commissioning archive was decided by what each handover pack was contractually required to contain.

What Executive Order 14420 Directs

Invoking the International Emergency Economic Powers Act, the order prohibits acquiring, importing, transferring or installing foreign-produced bulk-power system electric equipment where the Secretary of Energy determines that the supplier is owned by, controlled by or subject to the jurisdiction of a Covered Foreign Entity and that the transaction poses an undue risk. Section 3 gives the Department of Energy 120 days to publish implementing rules, and Section 4 gives it 180 days to recommend revisions to the Federal Acquisition Regulation.

Two provisions matter more to an asset owner than the import prohibition. Section 2(b) allows the Secretary to impose conditions on the continued use, operation, maintenance, servicing or updating of equipment installed before the order, including requirements to identify, isolate, monitor, secure, disconnect, replace or remove it. Section 3(c) directs recommendations on how to identify, inventory, isolate, monitor or replace such equipment. Both are inventory instructions before they are anything else.

The defined equipment list runs from substation transformers, reactors and high-voltage circuit breakers to grid-connected inverters, battery energy storage systems, protective relaying, remote terminal units, programmable logic controllers and safety instrumented systems, on transmission rated at 69 kV and above. Agencies may also consider associated software, firmware, remote-access capabilities and lifecycle maintenance mechanisms, which turns a nameplate question into a configuration question.

Britain and the EU Reach the Same Data Through Different Instruments

The Cyber Security and Resilience (Network and Information Systems) Bill is before Parliament and creates a designation regime inside the Network and Information Systems Regulations 2018. The critical suppliers factsheet, updated on 30 June 2026, sets the test: a supplier that provides goods or services directly to an operator of essential services, relies on network and information systems to do so, and whose disruption would significantly affect the economy or the day-to-day functioning of society. Designation brings statutory security duties that regulators can inspect and fine against. In the European Union, Article 21(2)(d) of NIS2 already requires essential entities, energy among them, to manage supply chain security, including the security of relationships with direct suppliers.

The three instruments ask different legal questions of the same operational data: the installed base by supplier, with unit-level identification and the software and access paths attached.

The Asset Record, Field by Field

Field or artefact	What a determination needs it to carry	Owner
`MANUFACTURER`, validated against the Companies master	The original equipment manufacturer as a legal entity, matched to a single Companies record	Asset information manager
Serial number and model	Unit-level identification against a rule naming a vendor and product family	Commissioning engineer
Rotating item number against Item Master	The link from the installed unit to spares and to any strategic spare	Materials manager
Classification attributes for country of manufacture, works of origin, firmware version and remote-access route	The facts the order names beyond the nameplate	Asset information manager
Purchase order and contract reference	The evidence trail behind the manufacturer field when a regulator asks how it was populated	Category manager

The first row is where most estates lose the answer. The manufacturer field often holds the installing contractor, the framework supplier or a free-text spelling variant, because the commissioning handover asked for a nameplate photograph and a completion certificate rather than structured attributes, and because nobody was staffed to validate the entry when the asset went live. Where several company sets exist across organisations, the same manufacturer appears as three records and the query returns three answers. The lever is the handover specification and the resource behind it.

Provenance Enters the Register at Commissioning

Contract and procedure put grid equipment provenance on the record, starting with the next capital scheme.

Write a handover data specification into the engineering, procurement and construction contract, listing the required attributes by asset classification, with country of manufacture, works of origin and firmware version named as deliverables against payment milestones.
Make asset data an acceptance test. The asset holds a non-operational status until the required specification attributes are populated, and the transition to operating status is validated by an automation script on the status change, using a scripting framework present in Maximo since 7.5 in around 2012.
Give the provenance attribute set one named owner, normally the asset information manager, with completeness reviewed monthly. The governance habits that hold asset master data steady after go-live are the same ones that make a supplier query answerable.
Backfill in criticality order. The top tier of transmission and generation assets runs to a few hundred records on most estates, and any determination reaches that population first.

Replacement Directions Land on a 120-Week Delivery Clock

A direction to replace equipment is a multi-year capital programme, because the supply position is already tight. Atlantic Council analysis published on 1 September 2026 cites North American Electric Reliability Corporation figures putting transformer lead times at roughly 120 weeks in 2024, with large power transformers reaching as long as 210 weeks, and notes utilities reporting transformer costs at four to six times pre-2022 levels. Around 80% of large transformers have historically been imported, and the grain-oriented electrical steel used in most US transformer cores is made domestically by one producer, Cleveland-Cliffs.

That arithmetic decides sequencing. Isolate, monitor and secure are the near-term instructions an operator can deliver, and each becomes maintenance work: a preventive maintenance route for units held under mitigation, condition monitoring such as dissolved gas analysis on transformers awaiting replacement, and a change control step that treats vendor firmware updates and remote-access sessions as controlled events with a named approver. Replacement priority then runs off criticality and spare availability together, which is the work a spares strategy anchored to asset criticality already does.

What Stays Hard

Sub-tier component origin sits beyond the asset record. A unit assembled in an allied country can carry components from elsewhere, and the Atlantic Council piece names battery management systems inside storage systems as the case to watch. The register holds what a supplier declares at tender and what the nameplate states; verifying a bill of materials needs a disclosure clause and an audit right, and neither is common in existing framework agreements.

Retrospective provenance on assets commissioned in the 1990s is largely unrecoverable. A defensible position sets a cut-off date, populates the attribute set from that date forward, backfills the top criticality tier from surviving purchase records, and states the gap in the compliance response.

The implementing rules are not published: scope, thresholds and the working definition of a Covered Foreign Entity are due within 120 days of 26 August 2026. Restructuring a register around a guess at that text is premature. Populating manufacturer, serial number, country of manufacture and firmware version is work any version of the rule requires.

Position

The deliverable to take into the next asset management review is a provenance completeness report over the top criticality tier: how many assets carry a validated manufacturer against the Companies master, how many carry country of manufacture and firmware version, and which capital scheme takes the handover data specification next. Operators who can produce that in a week will spend the regulatory conversation on mitigation and replacement sequencing. Operators who cannot will spend it explaining their own data, and will repeat the exercise for the next instrument, with the transformer they may be told to replace already two years out.