Required Notification To The Commission Of Cybersecurity Incident

A utility shall electronically notify the Commission’s Executive Director of any cybersecurity incident that results in interruption of service within 72 hours after discovery and confirmation, unless prohibited or recommended by law enforcement to avoid compromising an investigation. In such event, notification shall be required within 24 hours after such restriction is lifted by law enforcement.