Texas HB4231 establishes cybersecurity requirements for retail public utilities providing water or sewer service.

HB4231 mandates that retail public utilities must not connect their supervisory control and data acquisition systems to the internet, though they may use intranets or site-to-site virtual private networks. Utilities must notify relevant authorities of security incidents within 48 hours. The Texas Commission on Environmental Quality, in consultation with the Department of Information Resources and the Cyber Center for Security and Analytics, will adopt cybersecurity requirements, including employee authentication for network access.

Texas HB4231 establishes cybersecurity requirements for retail public utilities providing water or sewer service.

HB4231 mandates that retail public utilities must not connect their supervisory control and data acquisition systems to the internet, though they may use intranets or site-to-site virtual private networks. Utilities must notify relevant authorities of security incidents within 48 hours. The Texas Commission on Environmental Quality, in consultation with the Department of Information Resources and the Cyber Center for Security and Analytics, will adopt cybersecurity requirements, including employee authentication for network access.