Topic:"Performance Monitoring" in M12600

.performance.getEntriesByType; this.captureFetchRequests=function() {var b=[],c=a,h=function(f) {return f},d=function(f) {return Promise.reject(f)}; window.fetch&& Security Analysis by Meng Cheng var generateUniqueID=function(){return"v2-"...

AI summary The text contains JavaScript code related to performance monitoring and security analysis, including functions for tracking hidden time, generating unique IDs, and handling fetch requests. It also includes references to web security headers and performance metrics.

1 Request IR D-2: 2 3 (a) Describe the technical and organizational controls applied to protect customer 4 personal information prior to March 19, 2025, including: 5 6 (i) encryption of personal information at rest and in transit; 7 8 (ii)...

AI summary The text outlines information requests related to cybersecurity and privacy practices of Nova Scotia Power (NSP) prior to an incident, including technical and organizational controls, responses to ransomware threats, and privacy impact assessments. It also includes requests for details on the personal information stolen in an attack and steps taken to address the breach.

F. Conclusion - 105. In conclusion, in my opinion, the following actions by NSPI met best practice, and were reasonable in terms of expectations for customer service and limiting the impacts of the cybersecurity attack on customers: - Asid...

AI summary The conclusion evaluates NSPI's actions following a cybersecurity attack, finding some measures reasonable and others not. While NSPI's privacy governance, notification timelines, and customer communication were deemed reasonable, the use of a PI inventory, retention of SINs, and lack of record-keeping were considered unreasonable.

Performance Standards NS Power will continue to assess the extent to which the Incident may have an impact on Performance Standards metrics, but can confirm the following metrics have been impacted: - Regular Business Call Answer Rate: NS...

AI summary NS Power is assessing the impact of an incident on performance standards, noting that metrics like Regular Business Call Answer Rate and Percentage of Bills Estimated have been affected. Manual meter reading has been implemented to reduce estimated bills, while other metrics such as SAIDI and SAIFI remain unaffected.

Issues - (1) Privacy policies and procedures development, implementation, and adherence, including, but not limited to: - (i) Privacy training and percentage of staff that completed privacy training; - (ii) Policies for receiving and respo...

AI summary The issues outlined pertain to privacy policies, governance, risk management, breach response, data collection, and third-party involvement in a privacy-related incident. Key areas include training, complaint procedures, breach containment, reporting, and mitigation of fraud risks.

FINAL ISSUES LIST The following issues will be dealt with in the public hearing on Board inquiry on Matter M12600 - Minister of Energy – Accountability for Nova Scotia Power, which is set to begin Monday, July 27, 2026: - 1. Privacy polici...

AI summary The final issues list outlines key topics for a public hearing on Matter M12600, focusing on privacy policies, governance, risk management, customer data handling, cybersecurity incident impacts, billing accuracy, and regulatory implications related to Nova Scotia Power.

Nova Scotia Energy Board - 1 The Interrogatories that follow are designed to elicit the evidence necessary for the Board and its - 2 independent expert (MNP Digital) to assess NSP's performance against each element of this - 3 standard.

AI summary The Nova Scotia Energy Board is using interrogatories to gather evidence for evaluating NSP's performance against a specific standard, with the assistance of an independent expert.

IR A-6 — The February 27, 2025 UARB Filing - (a) NSP's Chief Operating Officer filed a report titled IT – OT Cyber Security Control - Implementation Phase 1 with the UARB on February 27, 2025, twenty days before the - Attack. With respect...

AI summary The document requests an explanation of NSP's cybersecurity plan focusing on OT systems and excludes IT systems, customer data systems, and billing platforms. It also asks about the review and approval of the plan's scope, existing cybersecurity controls for excluded systems, consideration of the NCTA 2025-2026 report, risk assessments for IT and customer data systems, and related documentation. Additionally, it seeks information on steps taken by NSP between February 27, 2025, and March 19, 2025, to address cybersecurity risks.

D. Issue 2: Retention of Social Insurance Numbers My second issue concerns NSP's decision to retain Social Insurance Numbers (SINs) for approximately 540,000 customers despite the absence of a clear operational or regulatory necessity for...

AI summary The issue concerns NSP's retention of SINs for 540,000 customers without clear necessity, raising concerns about data security risks, personal safety, and privacy. The argument focuses on risk management rather than billing or cost recovery.