Verification of implementation of cyber security plan

(a) Each year, the comptroller of the treasury, or the comptroller's designee, shall verify that a utility has implemented a cyber security plan in accordance with this part. (b) If a utility: (1) As described in § 7-51-2301(1) , has not implemented or updated a cyber security plan within the timeframe required by § 7-51-2302 , then the comptroller of the treasury, or the comptroller's designee, shall refer the utility to the Tennessee board of utility regulation to order reasonable sanctions against the utility; or (2) As described in § 7-51-2301(1) or (2) , has not implemented or updated a cyber security plan within the timeframe required by § 7-51-2302 , then the comptroller of the treasury, or the comptroller's designee, shall impose reasonable sanctions against the utility. Amended by 2023 Tenn. Acts, ch. 463, s 6, eff. 7/1/2023. Acts 2022 , ch. 1111, § 1. (a) Each year, the comptroller of the treasury, or the comptroller's designee, shall verify that a utility has implemented a cyber security plan in accordance with this part. (b) If a utility: (1) As described in § 7-51-2301(1) , has not implemented or updated a cyber security plan within the timeframe required by § 7-51-2302 , then the comptroller of the treasury, or the comptroller's designee, shall refer the utility to the Tennessee board of utility regulation to order reasonable sanctions against the utility; or (2) As described in § 7-51-2301(1) or (2) , has not implemented or updated a cyber security plan within the timeframe required by § 7-51-2302 , then the comptroller of the treasury, or the comptroller's designee, shall impose reasonable sanctions against the utility. (1) As described in § 7-51-2301(1) , has not implemented or updated a cyber security plan within the timeframe required by § 7-51-2302 , then the comptroller of the treasury, or the comptroller's designee, shall refer the utility to the Tennessee board of utility regulation to order reasonable sanctions against the utility; or (2) As described in § 7-51-2301(1) or (2) , has not implemented or updated a cyber security plan within the timeframe required by § 7-51-2302 , then the comptroller of the treasury, or the comptroller's designee, shall impose reasonable sanctions against the utility. Amended by 2023 Tenn. Acts, ch. 463, s 6, eff. 7/1/2023. Acts 2022 , ch. 1111, § 1.