Rules & Regulations of the State of Tennessee
Title 1220 - Tennessee Public Utility Commission
Subtitle 1220-04 - Division of Public Utilities
Chapter 1220-04-15 - Utility Cybersecurity Plans and Reporting
Section 1220-04-15-.01 - DEFINITIONS

(1) Commission - The Tennessee Public Utility Commission.

(2) Cybersecurity Incident - An event that, without lawful authority, jeopardizes, disrupts, or otherwise impacts, or is reasonably likely to jeopardize, disrupt, or otherwise impact, the integrity, confidentiality, or availability of computers, information, or communications systems or networks, physical or virtual infrastructure controlled by computers or information systems, or information resident on the system. This definition includes an event that is under investigation or evaluation by the owner/operator as a possible cybersecurity incident without final determination of the event's root cause or nature (such as malicious, suspicious, benign).

(3) Cybersecurity Plan - A plan or plans intended to protect the utility's information technology and operational technology systems from unauthorized use, alteration, ransom, or destruction of electronic data.

(4) Information Technology System - Any services, equipment, or interconnected systems or subsystems of equipment that are used in the automatic acquisition, storage, analysis, evaluation, manipulation, management, movement, control, display, switching, interchange, transmission, or reception of data or information that falls within the responsibility of the owner/operator to operate and maintain.

(5) Operational Technology System - A general term that encompasses several types of control systems, including industrial control systems, supervisory control and data acquisition systems, distributed control systems, and other control system configurations, such as programmable logic controllers, fire control systems, and physical access control systems, often found in the industrial sector and critical infrastructure. Such systems consist of combinations of programmable electrical, mechanical, hydraulic, pneumatic devices or systems that interact with the physical environment or manage devices that interact with the physical environment.

(6) Sworn Statement - A written statement made under oath that the statement is true based on personal knowledge.

(7) Utility - A public utility defined by T.C.A. § 65-4-101 that provides electric, water, wastewater, or natural gas services.