Please ensure Javascript is enabled for purposes of website accessibility Pa. House Consumer Protection Committee receives testimony on utility cybersecurity

Pa. House Consumer Protection Committee receives testimony on utility cybersecurity

HARRISBURG, Sept. 2 – On Tuesday, the PA House Consumer Protection, Technology and Utilities Committee held an informational briefing examining the need to strengthen Pennsylvania’s preparedness for cyber threats to critical utility infrastructure while protecting ratepayers.

Rep. Danilo Burgos, D-Phila., chairman of the committee, scheduled the hearing to hear from representatives of the Pennsylvania Public Utility Commission, municipal authorities, and cybersecurity experts regarding the evolving threats facing Pennsylvania’s critical infrastructure.

“We’re taking a closer look at how Pennsylvania’s utilities are preparing for an increasingly complex cybersecurity threat landscape,” said Burgos. “Operational technology controls the physical systems that deliver water, natural gas and electricity to Pennsylvanians. A cyberattack that disrupts those systems can quickly become a public safety, environmental and reliability issue.”

PUC Chairman Stephen M. DeFrank discussed the commission’s recent unanimous vote approving a Notice of Proposed Rulemaking intended to replace utility self-certifications with verifiable cybersecurity standards.

The proposed rules would establish a five-tiered classification system based on customer size and risk profile and incorporate recognized standards. The proposal would also establish requirements for reporting cybersecurity incidents to the PUC and Pennsylvania Cybersecurity and Infrastructure Coordinating Center while coordinating with federal reporting requirements.

Additional testimony focused on protecting ratepayers and ensuring utilities can continue operating critical systems during prolonged cyber disruptions.

Burgos said the committee will consider the testimony received as it evaluates potential legislation addressing utility cybersecurity and critical infrastructure preparedness.

“We need to ensure Pennsylvania is prepared to protect these essential services without placing unnecessary costs on ratepayers,” said Burgos. “The goal is resilient infrastructure, responsible regulation, and reliable service for Pennsylvanians.”

A recording of the hearing can be viewed at https://www.youtube.com/watch?v=M2iYJno6Wl4.