Compendium of Cyber Incident Notification Requirements for Critical Infrastructure Utilities by State
USDOE Office of Cybersecurity, Energy Security, and Emergency Response (CESER), Hyleah O'Quinn · 2022
Cyber attacks targeting critical infrastructure in the United States are on the rise and pose serious risks to the economy and health and safety of its citizens. Experts suggest a sound cyber risk mitigation strategy includes constant monitoring for signs of cyber intrusions and rapid reporting of incidents so that other critical infrastructure operators may benefit from early warnings. Reporting incidents to Public Utility Commissions (PUCs) and other state agencies who have roles in energy emergency planning and incident response and recovery is essential for them to maintain situational awareness and provide necessary support to ensure rapid restoration of utility services, should disruptions occur.