Press Release

PUC Recognizes National Critical Infrastructure Security & Resilience Month; Emphasizes Importance of Utility Cyber & Physical Security

Published on 11/9/2016

Filed under: Electric Gas Water and Wastewater Telecommunications Transportation and Safety

HARRISBURG – The Pennsylvania Public Utility Commission (PUC) today emphasized the importance of both cyber and physical security planning in safeguarding Pennsylvania’s critical utility systems in conjunction with National Critical Infrastructure Security and Resilience Month.

“Every day, we depend on a network of systems, including electricity to power our homes and businesses; natural gas for heating and cooking; clean drinking water; transportation systems; and telecommunications and Internet to stay connected with family and friends,” said PUC Chairman Gladys M. Brown. “Keeping these critical systems secure and operating – in the face of everything from natural disasters to man-made threats – is a key part of our responsibility to our citizens, our communities and our national security.”

Chairman Brown stressed that the Commission is committed to working with key stakeholders in government, utilities and nonprofit organizations to help ensure the security and resilience of our critical infrastructure. Those include efforts to strengthen cybersecurity of key systems, safeguard sensitive business and consumer information, enhance the physical security of critical facilities and improve the resilience of these systems – so that services can be restored more quickly.

Earlier this year, the PUC and the Office of the Governor hosted a “Black Sky” exercise, testing the state’s response to a large-scale outage event. The exercise drew more than 130 participants, representing state and federal government agencies; neighboring state utility commissions; military and law enforcement agencies; utility companies; emergency-response organizations; and nonprofit organizations. Pennsylvania is at the forefront of efforts to bring together key stakeholders in government, utilities and nonprofit organizations to collaborate and prepare for these threats.

“The overriding goal for these efforts is to keep our communities functioning,” said Commissioner Robert F. Powelson. “It is important that we work together to safeguard our infrastructure and position Pennsylvania for swift recovery, regardless of the emergency we face.”

The PUC has also produced a guide to Cybersecurity Best Practices for Small and Medium Pennsylvania Utilities, outlining ways that utilities can prevent identity or property theft; manage vendors and contractors who may have access to a company’s data; understand anti-virus software, firewalls and network infrastructure; how to protect physical assets, such as a computer in a remote location or a misplaced employee device; how to respond to a cyber-attack and preserve forensic information after the fact; how to report incidents; the potential benefits of engaging a law firm in advance of a breach; and a list of federal cyber incident resources.

The Pennsylvania Public Utility Commission balances the needs of consumers and utilities; ensures safe and reliable utility service at reasonable rates; protects the public interest; educates consumers to make independent and informed utility choices; furthers economic development; and fosters new technologies and competitive markets in an environmentally sound manner.

For recent news releases and video of select Commission proceedings or more information about the PUC, visit our website at www.puc.pa.gov. Follow the PUC on Twitter – @PA_PUC for all things utility.  “Like” Pennsylvania Public Utility Commission on Facebook for easy access to information on utility issues.

# # #

Contact:

• Nils Hagen-Frederiksen
  Press Secretary
  717-418-2701
  nhagen-fre@pa.gov