Law / United States / 
Tennessee
Utility cyber security plans: water and wastewater, cooperative, and county or municipal utilities
In force since .
A sector security regimes rule binding public and private bodies.
- Criminal exposure
- No
- Private right of action
- No
- Instrument type
- an act of a legislature
- Obligation class
- Security
As of .
What it requires
- This binds an entity subject to the jurisdiction of the water and wastewater financing board or the utility management review board, a cooperative, or a county-owned or municipal-owned utility that provides electric, natural gas, or propane services to the public (reached by declaring that you operate an essential service).
- Prepare and implement a cyber security plan to provide for the protection of the utility's facilities from unauthorized use, alteration, ransom, or destruction of electronic data, by or within one year after the utility is formed, whichever is later.
- Assess and update the cyber security plan every two years to address new threats.
These lines are LexLint's reading of the law's text, as of .
Who enforces it
Enforcement body
The comptroller of the treasury enforces the part, verifying each year that a utility has implemented a plan.
What this law does
For the part on utility cyber security plans, a utility means an entity subject to the jurisdiction of the water and wastewater financing board or the utility management review board, a cooperative, or a county-owned or municipal-owned utility that provides electric, natural gas, or propane services to the public.
A utility must prepare and implement a cyber security plan by , or within one year after the utility is formed, whichever is later, and must assess and update it every two years to address new threats. The comptroller of the treasury, or the comptroller's designee, must verify each year that a utility has implemented a cyber security plan.
For a cooperative or a county-owned or municipal-owned utility that has not implemented or updated a plan, the comptroller must impose reasonable sanctions. The comptroller of the treasury enforces the part and may promulgate rules necessary to effectuate it. Public Chapter 1111 was signed into law on .
When LexLint raises it
When your app profile says your app runs an essential service.