Cybersecurity
Cybersecurity
TXNM Energy believes that cybersecurity, like safety, is everyone’s responsibility. We are committed to a S3R3 cybersecurity philosophy, which exemplifies that only by simplifying and standardizing our systems and services are we able to secure them, and only by ensuring their redundancy and resilience can we provide a reliable electric supply. To actualize our philosophy, we maintain a robust, enterprise-wide, risk-based security program, adhering to the guidelines of the National Institute of Science and Technology (NIST) Cybersecurity Framework for Protecting Critical Infrastructure. To protect our most critical systems, we also comply with the North American Electric Reliability Corporation’s Critical Infrastructure Protection Standards. TXNM Energy maintains a strong security posture against cyber-attacks by employing effective technology, personnel and processes. We regularly assess control results through third party audits, penetration tests and internal assessments to continuously improve our cyber protections and data privacy controls. We partner with government and industry peers in several cybersecurity programs to share information and provide mutual assistance in the event of a cyber-attack. We assess the supply chain risk of third-party suppliers as part of our procurement process and incorporate cybersecurity contractual stipulations in all supplier contracts. TXNM Energy remains focused on increasing cybersecurity awareness and continues to implement additional technologies to enhance our cybersecurity capabilities.
