September 20, 2018 the Pennsylvania Public Utility Commission (PUC) announced the appointment of Michael C. Holko, of Dauphin County, as the Director of the Office of Cybersecurity Compliance and Oversight (OCCO), a new position created by the PUC to direct the Commission’s cybersecurity and regulatory oversight program in helping to ensure that the Commonwealth’s regulated utilities are protected from cyber-attacks and ensuring adequate, safe and reliable public utility service to consumers.
“We are pleased to add Michael to our PUC team as he joins us in this most critical position,” said PUC Chairman Gladys M. Brown at Public Meeting. “The creation of our new Office of Cybersecurity Compliance and Oversight is the next important step in the Commission’s continued efforts to protect Pennsylvania utility customers from experiencing disruption of utility services and other vital systems and services we depend on.”
Holko’s experience includes positions at the state’s Office of Administration’s Bureau of Personnel, the state’s Office of the Budget, the Pennsylvania Justice Network and most recently as a program manager at the state’s Office of Administration, Office for Information Technology. Holko received his bachelor’s and master’s degrees from Slippery Rock University. He resides in Harrisburg.
As the Director of the Office of Cybersecurity Compliance and Oversight, Holko will advise the Executive Director and Commissioners on policy issues and procedural improvements involving cybersecurity oversight functions of regulated utilities; draft proposed cyber-related regulations; and oversee the preparation of orders, rulemakings, policy statements, Secretarial Letters and memoranda related to cybersecurity policies and procedures of those regulated utilities.
Chairman Brown also noted that October is Cybersecurity Awareness Month, and discussed how the PUC is working with utilities, state agencies such as the Pennsylvania Emergency Management Agency (PEMA) and the Governor’s Office of Homeland Security, emergency responders, and other organizations to better prepare for cyber and physical attacks, strengthen critical systems, share information about current and future threats, and ensure that essential services are as resilient as possible. Last summer, those entities joined other stakeholders around the world in EARTH EX 2017, a first-ever transnational exercise to test responses to a large-scale power outage event.
Additionally, Chairman Brown stressed that it is equally important for consumers to review Pennsylvania’s online cybersecurity guide for tips to prevent identity theft, protect passwords, keep children safe online and secure mobile devices and referred utilities to the Cybersecurity Best Practices for Small and Medium Pennsylvania Utilities Guide, published by the PUC and available on its website.