Tenn. Comp. R. & Regs. 1220-04-15-.06 - REQUIRED NOTIFICATION TO THE COMMISSION OF CYBERSECURITY INCIDENT
A utility shall electronically notify the Commission's Executive Director of any cybersecurity incident that results in interruption of service within 72 hours after discovery and confirmation, unless prohibited or recommended by law enforcement to avoid compromising an investigation. In such event, notification shall be required within 24 hours after such restriction is lifted by law enforcement.
Notes
Authority: T.C.A. ยงยง 65-2-102 and 65-4-127.
State regulations are updated quarterly; we currently have two versions available. Below is a comparison between our most recent version and the prior quarterly release. More comparison features will be added as we have more versions to compare.