The CESER-NARUC CPET Training: Cybersecurity Knowledge for State Utility Regulators

CESER and the National Association of Regulatory Utility Commissioners (NARUC) have partnered to develop an online training module for state regulators. The Cybersecurity Preparedness Evaluation Tool (CPET) Training will provide strategies, tools, and expertise to engage in discussions about cybersecurity preparedness, response, and recovery planning, policies, and practices.

What Is The CPET?

This one-of-a-kind training is a follow-on effort to augment NARUC’s CPET Manual and mirrors in-person regional cyber trainings that NARUC only facilitates twice a year. The CPET provides a structured approach for PUCs to use in assessing the maturity of a utility’s cybersecurity risk management program and gauging capability improvements over time. The CPET is designed to be used with the Questions for Utilities on an iterative basis to help PUCs identify cybersecurity gaps, spur utilities’ adoption of additional mitigation strategies, and inform cybersecurity investment decisions.

Who Is This Training For?

These comprehensive training resources are designed to empower state regulators with the necessary skills and knowledge to navigate the dynamically evolving landscape of utility regulation while ensuring robust cybersecurity preparedness. This CESER funded and supported program will aid PUCs in evaluating a utility’s cybersecurity maturity.

What Is Covered?

The course is approximately 1.5 – 1.75 hours long and includes an introduction video, 8 course modules, and a capstone activity.

1. Introduction to the Cybersecurity Preparedness Evaluation Tool.
2. Review of frameworks that support cybersecurity maturity and the value of the Cybersecurity Preparedness Evaluation Tool
3. Questions to ask utilities which includes engagement examples and question selection to measure cybersecurity preparedness.
4. Review of engagement strategies to employ when interfacing with utilities.
5. Review of the 5 core functions and 9 topic areas for commissions to consider when engaging utilities.
6. Explanation of how commissions can use the tool to develop a cybersecurity maturity rating for their utilities.
7. Animated capstone scenario that allows the trainees to apply the Cybersecurity Preparedness Evaluation Tool.
8. An introduction and explanation the Questions for Utilities and how commissions may select questions tailored to and driven by their informational needs.
9. Applying the CPET.

Learn More & Take the Training

We encourage you to start your training journey today and stay at the forefront of utility regulation and cybersecurity readiness. 

Click here to learn more or sign up for the training.