09-09-2019 BPU RPT 04 - Laserfiche WebLink

Home

W A T E R E N E R G Y T I F F RIVERSIDE PUBLIC UTILITIES W& Board Memorandum P U B L I C U T I L I T I E S BOARD OF PUBLIC UTILITIES DATE: SEPTEMBER 9, 2019 ITEM NO: 4 SUBJECT: RIVERSIDE PUBLIC UTILITIES' SECURITY PROGRAM UPDATE ISSUE: Receive an update on Riverside Public Utilities' Security Program which includes policies for cyber security and physical security specific to Public Utilities assets and facilities. RECOMMENDATION: That the Board of Public Utilities receive and file an update on Riverside Public Utilities' Security Program which includes policies for cyber security and physical security specific to Public Utilities assets and facilities. BACKGROUND: The Riverside Public Utilities Security Program ("RPU -SP") was adopted in October 2018. It was established to formalize and implement the Department's organization and activities surrounding the security of the personnel and assets of Riverside Public Utilities. The RPU -SP is focused on the development, approval and maintenance of security policies, standards and guidelines which benefit Riverside Public Utilities ("RPU") by establishing key initiatives and strategic objectives. The program will also enable objectives such as data loss prevention, proactive data management, program governance, and an improved infrastructure consisting of system and network services. DISCUSSION: The RPU -SP replaces the policies created and adopted in 2007. It includes policies, standards, procedures and guidelines as well as their associated implementation in the following areas: 1. Cyber and Information Security and Protection 2. Physical Security and Protection 3. Industrial Safety 4. Business Continuity and Disaster Recovery 5. Emergency Preparedness The RPU -SP also includes governance and oversight controls such as: 1. Leadership and operational structures 2. Measurement and management of security/safety resources and assets 3. Asset and resource management oversight and control