Strengthening Cyber Security in Ontario’s Electricity Sector
August 27, 2025
The OEB has issued version 3.0 of the Ontario Cyber Security Standard, effective September 22, 2025.
This updated Standard introduces new requirements for licensed electricity distributors and transmitters (collectively referred to as utilities) to report cyber security incidents to the Independent Electricity System Operator (IESO) and to the OEB. This step is a key milestone in enhancing situational awareness and protecting Ontario’s electricity consumers.
What You Need to Know:
- New Requirement: Utilities must report confirmed cyber security incidents by the end of the next business day.
- Why It Matters: Incident reporting will strengthen the sector’s ability to respond to threats and improve consumer protection.
- Next Steps: Utilities can access reporting guidance and templates via the IESO’s Lighthouse portal.
