A CYBERSECURITY PROGRAM THAT:
(1) IS DEVELOPED BY AN ACCREDITED CYBERSECURITY
PROFESSIONAL;
(2) IMPLEMENTS ORGANIZATIONAL ACCOUNTABILITY AND
RESPONSIBILITIES FOR CYBER RISK MANAGEMENT ACTIVITIES; AND
(3) ESTABLISHES POLICIES, PLANS, PROCESSES AND
PROCEDURES FOR IDENTIFYING, REPORTING AND MITIGATING CYBER
RISK TO THE WATER SYSTEM'S AND WASTEWATER SYSTEM OPERATOR'S
COMMUNITY WATER SYSTEM OR COMMUNITY WASTEWATER SYSTEM.
§ 3707. ANNUAL INFORMATION TO CUSTOMERS.
A WATER SYSTEM OPERATOR SHALL ANNUALLY INFORM THE OPERATOR'S
CUSTOMERS OF COMPLIANCE WITH THIS CHAPTER IN A MANNER
ESTABLISHED BY THE COMMISSION.
§ 3708. REGULATIONS.
(A) TEMPORARY.--THE COMMISSION SHALL PROMULGATE TEMPORARY
REGULATIONS AS NECESSARY TO IMPLEMENT THIS CHAPTER. THE
TEMPORARY REGULATIONS SHALL NOT BE SUBJECT TO THE FOLLOWING:
(1) SECTIONS 201, 202, 203, 204 AND 205 OF THE ACT OF
JULY 31, 1968 (P.L.769, NO.240), REFERRED TO AS THE
COMMONWEALTH DOCUMENTS LAW .
(2) SECTIONS 204(B) AND 301(10) OF THE ACT OF OCTOBER
15, 1980 (P.L.950, NO.164), KNOWN AS THE COMMONWEALTH
ATTORNEYS ACT .
(3) THE ACT OF JUNE 25, 1982 (P.L.633, NO.181), KNOWN AS
THE REGULATORY REVIEW ACT .
(B) EXPIRATION.--THE TEMPORARY REGULATIONS PROMULGATED UNDER
SUBSECTION (A) SHALL EXPIRE UPON THE PROMULGATION OF FINAL FORM
REGULATIONS OR TWO YEARS FOLLOWING THE EFFECTIVE DATE OF THIS
SECTION, WHICHEVER IS EARLIER. ( Reserved ).
§ 3709. CONTINGENCY FOR PUBLIC FUNDING.
A03975 - 21 -
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30