A system and method of securing access to energy reporting and controlling devices in a facility through context specific commands that are validated against anomalous activities. Should anomalies occur, secondary authentication is performed to allow for exceptions and device access can be revoked preventing intrusions whether for unauthorized monitoring or control of the system.