OSINT-y Goodness, №18 — NARUC
Listen up, all you OT/ICS/SCADA types! This blog post is all about the website for the National Association of Regulatory Utility Commissioners, also known as NARUC. Operational Technology is so hot right now. Not everything on this site is of interest to OSINT researchers. I will give a brief overview of what can be found on the site, then get into the real good stuff!
About NARUC (from their website)
“Founded in 1889, the National Association of Regulatory Utility Commissioners (NARUC) is a non-profit organization dedicated to representing the state public service commissions who regulate the utilities that provide essential services such as energy, telecommunications, power, water, and transportation.”
Navigating the NARUC website
This site contains a lot of information and is easily broken down into these categories:
The print above is small, so the categories are:
- Policy and Advocacy
- Center for Partnerships & Innovation
- International
- Meetings and Events
- Education & NRRI (National Regulatory Research Institute)
Take a look at the International section. They have interesting information like, “The Practical Guide to Women in Energy Regulation.”
But, the really cool stuff is in the Center for Partnerships & Innovation section!
Oh, this is where it gets good! You will find the following documents, links are PDFs:
- NARUC Cybersecurity Manual — Cybersecurity Glossary
- Cybersecurity Preparedness Evaluation Tool
- Understanding Cybersecurity Preparedness: Questions for Utilities
- Cybersecurity Strategy Development Guide
If that doesn’t rock your boat, they also have a Resource Library!
You can search the NARUC Resource Library here.
There’s the Simple Search:
and there’s the Advanced Search:
If you do a Simple Search for the term “cybersecurity,” you get a lot of results. PDFs and links to other documents with that keyword.
What else?
The NARUC website contains a lot of links to their work that could be of interest to researchers and people in the Information Security industry. For example, the Committee on Critical Infrastructure.
From the NARUC website:
“Established on a temporary basis after the Sept. 11, 2001, terrorist attacks, the now-permanent Critical Infrastructure Committee provides State regulators a forum to analyze solutions to utility infrastructure security and delivery concerns. As demonstrated on Sept. 11 and later during Hurricane Katrina, protection of the nation’s energy and telecommunications infrastructure is critical to national security, and this committee gives State regulators opportunities to share best practices and collaborate amongst themselves and their federal counterparts.”
Miscellaneous
The NARUC newsfeed can be found on their main website page. They also have a presence on Twitter as @naruc, LinkedIn, YouTube, and they have a Press Release page.
