犹他州立法审计：市营电力系统网络安全短板明显 最大供电企业防护成熟
犹他州立法审计部门本周二（10月20日）向立法审计小组委员会提交第2026-32号绩效审计报告，主题为电力与天然气网络安全。据 Utah News Dispatch 报道，报告指出，占犹他州电力销售约78%的落基山电力公司（Rocky Mountain Power）网络安全防护较为成熟；相比之下，约占销售16%的市营电力系统存在基本短板：受访的五个市营系统都没有使用独立第三方评估，也没有制定、记录并定期演练网络事故响应计划。
审计人员提醒，长时间停电会影响医院、饮用水与污水处理、学校和交通等关键服务，缺乏演练可能延长恢复时间。报告没有直接提出单一整改方案，而是给出供议员考虑的选项，包括请犹他网络中心或网络安全委员会制定示范响应计划、设定基本防护要求，或对采用公认做法的系统给予责任限制。
犹他州公共服务委员会目前对落基山电力的网络安全监督主要依托费率审查框架，审计认为这一角色有限。任何全州新要求仍需立法或机构行动，审计本身不直接设立规则。
Utah Legislative Audit Finds Cybersecurity Gaps at Municipal Power Systems
Utah's legislative auditor presented performance audit report 2026-32, on electric and natural gas cybersecurity, to the Legislative Audit Subcommittee on Tuesday, October 20, Utah News Dispatch reported. The audit found that Rocky Mountain Power, which accounts for about 78% of electricity sold in Utah, has a mature cybersecurity posture. By contrast, municipal power systems — about 16% of sales — showed basic gaps: none of the five systems interviewed had obtained an independent third-party assessment, and none had a documented, regularly practiced incident response plan.
Auditors warned that prolonged outages would affect hospitals, drinking water and wastewater treatment, schools and transportation, and that untested plans can lengthen recovery times. Rather than prescribe a single fix, the report offers legislators options, including having the Utah Cyber Center or the Cybersecurity Commission develop a model response plan, setting baseline protection requirements, or granting liability protection to systems that adopt recognized practices.
The audit said the Utah Public Service Commission's cybersecurity oversight of Rocky Mountain Power rests mainly on its rate-case framework and is limited. Any new statewide requirements would need legislative or agency action; the audit itself sets no rules.
发布：GSM·美国（发布链接）
图片来源：图：犹他州议会大厦（Salt Lake City）。摄影：Farragutful，CC BY-SA 4.0（Wikimedia Commons）。Photo: the Utah State Capitol in Salt Lake City. Photo by Farragutful, CC BY-SA 4.0 (Wikimedia Commons).
GSM Global · 本篇英文版 English edition of this story
