Rules v. guidelines

“PG&E Among Utilities Cited for Failing to Protect Against Cyber and Physical Attacks,” The Wall Street Journal, April 10, 2019.  They allegedly broke the rules years ago.

What does it say when major utility companies don’t follow the rules on protecting themselves from cyberattack?  Is that a colossal Governance and Compliance issue?  Do they feel that the rules don’t apply to them?  Are they more like guidelines?  Is this a cultural issue?

Leave a comment

Filed under Theme One: Information, Theme Three: Compliance, Theme Two: Governance

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s