Full Title: A Guide for Public Utility Commissions: Recruiting and Retaining a Cybersecurity Workforce
Author(s): Ashton Raffety, Lynn P. Costantini
Publisher(s): National Association of Regulatory Utility Commissioners (NARUC)
Publication Date: February 16, 2021
Full Text: Download Resource
Description (excerpt):
Public utility commissions (PUCs) recognize that the critical infrastructure sectors they regulate face ever-evolving cybersecurity threats from malicious actors. To provide effective oversight and support their regulated utilities in addressing these threats, PUCs are striving to increase their cybersecurity expertise. Yet, a shortage of trained cybersecurity professionals in the workforce, coupled with internal budget constraints and strict civil service hiring requirements, may impact a PUC’s ability to hire and retain qualified staff. These challenges, however, are not insurmountable.
This paper serves as a reference guide for PUCs trying to develop or expand their cybersecurity proficiency. It describes the role of cybersecurity personnel within a PUC and a range of cybersecurity skill sets that may fit a PUC’s needs, as well as avenues for recruiting, retaining, and growing cybersecurity expertise. Appendices provide lists of cybersecurity training resources, recruitment pipelines, and a compendium of sample cybersecurity job descriptions for PUC consideration.