What DOE's EO 14421 FAQ Puts in Writing
By Patrick Miller
The Department of Energy (DOE) published a 22-question frequently asked questions (FAQ) document on Executive Order (EO) 14421 on October 6, three days before its request for information closed. Most of it puts on paper what DOE said at the September webinar, and a few answers go further, on data centers, on reliability standards, and on when a transaction counts as initiated.
Overview
DOE's Office of Cybersecurity, Energy Security, and Emergency Response (CESER) posted Frequently Asked Questions on the Bulk-Power System Executive Order and the DOE Request for Information, dated October 6, 2026, to its EO 14421 page next to the webinar recording and transcript. Responses to the request for information (RFI) were due October 9, and the FAQ says the notice doesn't set up a general rolling comment period after that, so the record DOE will write from is closed, even if much of it isn't public yet. This post looks at which parts of the FAQ move anything compared with the RFI itself and the September 16 webinar.
Right at the top, DOE says the FAQs don't create legal requirements, don't determine whether any specific transaction, equipment, country, person, or vendor is covered, and give way to the order and to anything DOE issues later wherever the two disagree. DOE also says it may update them. So it's DOE's current reading of the order, and probably not something to build a compliance position on by itself. I'd keep a dated copy of the version you're working from, since there will likely be another one.
What the FAQ Settles and What It Leaves Open
Most of the 22 answers restate the order or the RFI. The ones below are where the FAQ either puts something in writing for the first time or says outright that a question is still open.
| Topic | What the FAQ says | What it leaves open |
|---|---|---|
| Blanket ban (Q2) | A targeted, risk-based framework. A prohibition needs the covered equipment, Covered Foreign Entity, and risk findings, plus a Secretary determination after the required consultations. | Which equipment classes get looked at first |
| When a transaction is "initiated" (Q8) | The order doesn't pick a single point. Contract signature, manufacture, shipment, delivery, transfer of title, and installation are all named as candidates. | All of it, under consideration through the RFI and the implementing rules |
| Installed equipment (Q9) | Not automatically prohibited or subject to removal until the Secretary makes the required determinations and completes consultations. Reliability, safety, replacement availability, and continuity of service come first, and phased compliance is authorized. | Which conditions, on which equipment, on what timeline |
| Behind the meter and data centers (Q5) | Location alone neither includes nor excludes equipment. Generators, reciprocating engines, batteries, and uninterruptible power supply systems at a data center aren't excluded just because of where they sit. | How the listed factors get weighed against each other |
| Covered Foreign Entity (Q10) | Defined through 22 CFR 126.1 or a Secretary determination. The 126.1 reference doesn't remove the need to look at ownership, control, jurisdiction, direction, and transaction facts, and the FAQ designates nobody new. | Any list beyond 126.1 |
| Foreign-produced (Q11) | The order sets no domestic-content threshold, no substantial-transformation test, no specific treatment of U.S. final assembly, no Harmonized Tariff Schedule codes, and no categorical rule for foreign components. | All five |
| Reliability and cyber standards (Q13, Q20) | Compliance with North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) standards or other standards isn't an automatic exemption and doesn't replace NERC obligations. NERC information may support DOE's analysis. | How much weight NERC evidence carries |
| Certification and prequalification (Q13, Q14) | No certification or attestation process adopted yet. Prequalification is authorized, with no deadline to build it. | Whether either one gets built, and when |
| Meetings with DOE (Q18) | Permit-but-disclose ex parte handling. A covered meeting generally needs a memo, from you, within about a week, and it may go into the public docket. | The governing guidance still isn't cited by name |
| Late comments (Q22) | No general rolling comment period. Contact the RFI point of contact, and DOE can't guarantee a late filing gets considered. | Whether DOE reads late filings anyway |
"Initiated" Is Officially Open
When I wrote about the order in August, I pointed out that the forward prohibition turns on transactions initiated after August 26, 2026, and that the order never defines "initiated." The FAQ now says so in writing. Question 8 names six points it could plausibly mean, from contract signature through installation, says the order doesn't specify any one of them, and says DOE is considering it through the RFI and the implementing rules. For anything in procurement right now, which point the rule picks probably decides whether a deal signed in July and delivered next spring is inside the prohibition at all. DOE's advice from the webinar still holds here, which is to write down the milestones on anything in flight while the records are still easy to pull together.
The Safe Harbor Question
Question 9 asks whether there's an interim safe harbor for equipment already installed and operating. The answer never uses the phrase. It says covered equipment acquired or installed before August 26 "is not automatically prohibited or subject to removal" until the Secretary has made the order's determinations and completed the consultations, that the Secretary may then impose conditions, and that before directing isolation, disconnection, replacement, or removal, DOE has to consider reliability and safety, the availability of secure replacements, and continuity of essential service. That's Section 2(b) of the order restated, more or less. I'd read it as a list of steps DOE has to take before it can order anything disruptive, which is consistent with how the RFI treated existing equipment back in September. The answer also points stakeholders to the RFI process for recommendations on transition mechanisms, temporary relief, and phased compliance. With the deadline past, that mostly means whatever was already filed.
Location Doesn't Decide Scope
Under question 5, equipment isn't automatically included or excluded because it sits behind the meter, at a data center, at another critical infrastructure facility, or at the same point of interconnection as a load. DOE's examples are diesel generators, natural-gas reciprocating engines, battery systems, and uninterruptible power supply systems at a data center. The factors it lists instead are whether the equipment is used in, connected to, or associated with the bulk-power system, whether the generation is needed to maintain reliability, the equipment's voltage, capacity, connectivity, function, and operational effect, whether it supports a covered control, protection, restoration, or critical grid function, and whether the order's other requirements are met. Back in August I asked whether a battery on a distribution circuit is a local distribution facility or a resource, and said I didn't think anybody knew yet. The FAQ doesn't answer that, but it does list the facts DOE will look at, and for a large load with on-site generation and storage those start with function and connectivity, whichever side of the meter the equipment sits on.
Question 7, on mixed-use and general-purpose items, has a related point. One of its key sentences, that scope may depend on actual configuration, connectivity, function, operational authority, remote access capabilities, and relationship to covered equipment, ended up in the heading along with the question. Question 15 has the same layout problem. If you cite DOE on mixed-use equipment, that's probably the sentence you'll want, and you'll find it in the question heading.
NERC CIP Isn't an Exemption
Question 20 sets out how the order relates to NERC Reliability Standards, and it makes three points. Compliance with NERC standards doesn't by itself establish that equipment, a vendor, or a transaction is prequalified, out of scope, or free of the order's risks. The order doesn't replace NERC obligations, and where both apply, meeting one doesn't excuse missing the other. And NERC information, including registration and asset determinations, reliability studies, and supply-chain controls, may serve as evidence for DOE's analysis of scope, reliability effects, mitigation, licensing, or replacement. Question 13 says the same thing more broadly about CIP, International Organization for Standardization (ISO) and International Electrotechnical Commission (IEC) standards, and other supply-chain standards, and adds that no certification or attestation process has been adopted for the order yet. Question 14 says prequalification is authorized but has no deadline.
None of that is surprising, since in August I wrote that neither CIP regime contains the order and the order contains neither of them, and DOE is now saying roughly the same thing. Your CIP-013 plan and your CIP-003 Section 6 vendor access inventory won't keep anything out of scope, but under that third point they're probably the first evidence you'd hand DOE about an asset, which is a reason to keep them current. It's also another reason to organize that inventory by who owns the manufacturer as well as by who holds credentials. Whether DOE leans on third-party laboratories and certification bodies, which is what question H-3 in the RFI asked about, is still open, and question 13 says DOE is still seeking input on it.
Talking to DOE Goes on the Record
Communications about the merits of a pending rulemaking may fall under DOE's "permit-but-disclose" guidance. DOE staff generally listen and ask clarifying questions, they don't negotiate outcomes or disclose nonpublic parts of a forthcoming rule, a covered oral communication generally has to be summarized in a memo giving the date, attendees, and substantive issues, and the interested party generally has to get that memo to DOE within one week. The memo and any materials provided may go into the public docket, and DOE says not to hand over documents in a covered meeting unless you're prepared for them to become part of the record. The FAQ still doesn't cite the guidance by name. My best guess remains DOE's Guidance on Ex Parte Communications from October 2009, at 74 FR 52795. Meeting requests go to BulkPowerEO@doe.gov. With comments closed, a meeting request is the obvious next step for anyone who missed the deadline, and the memo requirement applies to that meeting too.
Response/Comment Review Coming Soon
DOE had received 131 responses through Regulations.gov as of October 10, according to the Federal Register's page for the RFI, which draws the figure from the docket. Only some of them are readable yet. DOE reviews submissions before posting them, and the RFI itself warns that when volumes are high a response may not be viewable for several weeks. Responses sent by email, mail, or hand delivery get posted to the same docket, and confidential filings appear only in their redacted versions. I'll write up what's in the record once DOE has finished posting it, since an early read would probably miss a lot of the trade association and manufacturer filings, which tend to come in closer to the deadline.
Where This Leaves Us
DOE's rules are due December 24, 2026, and the FAQ repeats the order's "as needed" qualifier twice, in questions 1 and 16. Question 16 also lists what DOE's review of the record may address, which runs from equipment and transaction scope through Federal procurement and interagency coordination. The FAQ answers more than I expected it to. On the questions with real money attached, though, it says plainly that nothing is decided yet, and that covers when a transaction is initiated, what counts as foreign-produced, and who beyond the International Traffic in Arms Regulations (ITAR) list at 22 CFR 126.1 counts as a Covered Foreign Entity. The record those answers will come from is still being posted, and what the sector told DOE will probably say more about the December rule than the FAQ does.
