Pennsylvania Code › Title 52 - PUBLIC UTILITIES › Part I - Public Utility Commission › Subpart E - Public Utility Security Planning and Readiness › Chapter 101 - PUBLIC UTILITY PREPAREDNESS THROUGH SELF CERTIFICATION › Section 101.2 - Definitions

Current through Register Vol. 54, No. 28, July 13, 2024
The following words and terms, when used in this chapter,
					 have the following meanings, unless the context clearly indicates
					 otherwise:
Abnormal operating condition
-A condition
					 possibly showing a malfunction of a component or deviation from normal
					 operations that may:
(i) Indicate a
				  condition exceeding design limits.
(ii) Result in a hazard to person, property
				  or the environment.
Business continuity plan
-A written plan
					 that will ensure the continuity or uninterrupted provision of operations and
					 services through arrangements and procedures that enable a utility to respond
					 to an event that could occur by abnormal operating conditions.
Business recovery
-The process of planning
					 for and implementing expanded operations to address less time-sensitive
					 business operations immediately following an abnormal operating
					 condition.
Business resumption
-The process of
					 planning for and implementing the restarting of defined business operations
					 following an abnormal operating condition, usually beginning with the most
					 critical or time-sensitive functions and continuing along a planned sequence to
					 address all identified areas required by the business.
Contingency planning
-The process of
					 developing advance arrangements and procedures that enable a jurisdictional
					 utility to respond to an event that could occur by abnormal operating
					 conditions.
Critical functions
-Business activities or
					 information that cannot be interrupted or unavailable for several business days
					 without significantly jeopardizing operations of the organization.
Cyber security
-The measures designed to
					 protect computers, software and communications networks that sup-port, operate
					 or otherwise interact with the company's operations.
Cyber security plan
-A written plan that
					 delineates a jurisdictional utility's information technology disaster
					 plan.
Emergency response plan
-A written plan
					 describing the actions a jurisdictional utility will take if an abnormal
					 operating condition exists.
Infrastructure
-The systems and assets so
					 vital to the utility that the incapacity or destruction of the systems and
					 assets would have a debilitating impact on security, economic security, public
					 health or safety, or any combination of those matters.
Jurisdictional utility
-A utility subject
					 to the reporting requirements of §
										27.10, §
										29.43, §
										31.10, §
										33.103, §
										57.47, §
										59.48, §
										61.28, § 63.36 or §
					 65.19.
Mission critical
-A term used to describe
					 essential equipment or facilities to the organization's ability to perform
					 necessary business functions.
Physical security
-The physical (material)
					 measures designed to safeguard personnel, property and information.
Physical security plan
-A written plan that
					 delineates the response to security concerns at mission critical equipment or
					 facilities.
Responsible entity
-The person or
					 organization within a jurisdictional utility designated as the security or
					 emergency response liaison to the Commission.
Self Certification Form
-The Public Utility
					 Security Planning and Readiness Self Certification Form.
Test
-A trial or drill of physical
					 security, cyber security, emergency response and business continuity plans.
					 Testing may be achieved through a sum of continuous partial testing rather than
					 one distinct annual drill when an entire plan is tested from beginning to
					 end.