New Cyber Security Reporting Requirements for Distributors and Transmitters
September 4, 2025
The Ontario Energy Board (OEB) has updated the Ontario Cyber Security Standard ("Standard") to require all licensed distributors and transmitters to report confirmed cyber security incidents to the IESO, starting September 22, 2025.
Under the revised Standard, incidents must be reported by the end of the next business day following confirmation. The IESO will use these reports to issue alerts through the Lighthouse service, notifying the OEB of any notable incidents.
This new reporting requirement is part of a broader initiative to improve sector visibility, strengthen consumer protection, and support a coordinated response to cyber threats.
For more information, please contact the OEB at IndustryRelations@oeb.ca.