Pa. Public Utility Commission Issues Cybersecurity Advisory
Harrisburg, Pa. — The Pennsylvania Public Utility Commission (PUC) has disseminated a comprehensive cybersecurity advisory directed at all regulated utilities as well as licensed electric and natural gas suppliers throughout the state.
This directive arises amidst escalating international tensions and apprehensions regarding potential cyber operations that may target critical infrastructures. In light of these developments, the PUC advocates for heightened vigilance and reinforced cyber defenses.
“Cybersecurity remains a paramount concern for the Commission and the utilities under our purview,” stated PUC Chairman Steve DeFrank.
“Although there are currently no specific threats reported to Pennsylvania utilities, global events serve as a vital reminder of the need for unwavering vigilance concerning our critical infrastructure.
By sharing timely intelligence and bolstering robust cybersecurity practices, the Commission is actively collaborating with utilities throughout Pennsylvania to safeguard the systems that power our homes, businesses, and communities.”
Dispatched to jurisdictional utilities earlier this month, the advisory enumerates a set of recommended cybersecurity protocols aimed at assisting these entities in protecting vital services encompassing electricity, natural gas, water, telecommunications, and other essential systems.
The Commission has emphasized that shifting geopolitical landscapes—including the ongoing discord involving Iran—highlight the necessity of robust cybersecurity safeguards across all critical infrastructure sectors due to the potential for retaliatory cyber actions targeting U.S. facilities.
Recommended Cybersecurity Practices
To mitigate the risk of cyber intrusions or disruptions, the Commission recommends adherence to widely recognized best practices, which include:
- Fortifying network defenses by keeping sensitive operational systems isolated from the public internet whenever feasible.
- Enhancing access security through the implementation of strong passwords and phishing-resistant multi-factor authentication for remote access and administrative platforms.
- Addressing existing software vulnerabilities by ensuring that critical systems, firewalls, and remote management tools are consistently updated and secured.
- Augmenting monitoring and incident response strategies, which entails a review of business continuity and disaster recovery plans, ensuring utilities can swiftly identify and react to anomalous network activity.
The Commission urges utilities to stay vigilant against sophisticated cyber techniques that utilize legitimate system tools to evade detection—often referred to as “living off the land” tactics—and to closely monitor their systems for unusual activities that could indicate unauthorized access.
Cybersecurity Resources
The PUC encourages utilities to consult the guidance provided by the U.S. Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA), including the agency’s “Shields Up” initiative and various cybersecurity resources designed to strengthen the defensive posture of critical infrastructure operators.
Any cyber incidents should be reported to relevant authorities, including the FBI, the Pennsylvania Criminal Intelligence Center, and the PUC (if the incident falls under PUC’s cyber reporting regulations).
“Safeguarding the systems that provide essential utility services is pivotal for public safety and economic stability,” DeFrank asserted.
“The Commission is committed to ongoing collaboration with utilities, law enforcement, and national partners to ensure Pennsylvania is poised to address contemporary and future cybersecurity challenges.”
Regularly, the PUC coordinates with federal agencies, industry organizations, and other state regulators to share information on threats and fortify protections for critical infrastructure systems.
With cyber threats perpetually evolving, the PUC encourages utilities of all sizes to routinely reassess their cybersecurity protocols and maintain engagement with state and federal partners regarding emergent risks.
Source link: Tiogapublishing.com.
