Utah energy providers have mature cybersecurity protocols, but there are gaps, audit says

The only state agency overseeing cybersecurity for Rocky Mountain Power is the Utah Public Service Commission, which has limited governance.

The federal government regulates cybersecurity for large portions of the electrical grid, including generation and transmission.

Municipal power systems in Utah lack incident response plans and independent third-party assessments, leaving them vulnerable to cyberattacks.