press releases

NARUC Releases Updated Cybersecurity Manual

View as PDF

For Immediate Release: January 31, 2017 

Contact: Regina L. Davis, 202-898-9382,


NARUC Releases Updated Cybersecurity Manual


WASHINGTON—The National Association of Regulatory Utility Commissioners has released a new and updated third edition of Cybersecurity for State Regulators. Produced by NARUC’s Research Lab, with funding support from the U.S. Department of Energy, the primer has become an indispensable manual for state public utility commissions on the frontlines of ensuring that utility systems are prepared and resilient against cyberattacks. 

Since its first release in 2012, most state commissions have used the primer to engage with utilities using a series of sample questions to explore how utilities are making prudent investments in cyber-preparedness. Although intended primarily for state commissions, the manual is readable and useful to a range of policymakers. The new edition is updated to include the most recent guidelines and tools for regulators and the companies they regulate to improve security, with more than double the sample questions and guidance on how to use them. 

 “This primer is important to regulators because it serves as a practical guide for state commissions to engage proactively and strategically with regulated industries,” said NARUC President Robert F. Powelson of Pennsylvania.

“As a state commissioner, I can say that this manual comes at a time when we need it most,” said Richard Mroz, President of the New Jersey Board of Public Utilities and Chairman of NARUC’s Committee on Critical Infrastructure. “It explores the essential issues that are relevant for regulators—cost recovery, information protection, supply chain issues, management of insider threats and builds on established best practices.” 

In conjunction with the release of previous editions of the primer, the Research Lab provided more than 60 cybersecurity training sessions to regulators across North America. For this edition, NARUC will partner with the DOE to roll out new online and on-site training sessions to every U.S. state in 2017 and 2018. In addition the Association will convene and support continued information-sharing among states, companies and federal decision-makers to protect our nation’s essential critical infrastructure. 

Cybersecurity for State Regulators, 3rd ed., can be downloaded at on NARUC’s website.


NARUC is a non-profit organization founded in 1889 whose members include the governmental agencies that are engaged in the regulation of utilities and carriers in the fifty States, the District of Columbia, Puerto Rico and the Virgin Islands. NARUC's member agencies regulate telecommunications, energy, and water utilities. NARUC represents the interests of State public utility commissions before the three branches of the Federal government.