State commissions can select from a toolkit of regulatory approaches to promote desired utility cybersecurity behavior. One approach is to allow the industry to selfregulate, and another approach...
The Challenge of Implementing NERC's Cyber Standard
How to develop, implement, and operate a security program.
compared with an entity serving only as a distribution function, the latter of which may not have any critical cyber assets.
12. Managing for Enterprise Security, Richard Caralli, Carnegie Mellon University, December 2004.