(a) Each year, the comptroller of the treasury, or the comptroller's designee, shall verify that a utility has implemented a cyber security plan in accordance with this part.
(b) If a utility:(1) As described in § 7-51-2301(1), has not implemented or updated a cyber security plan within the timeframe required by § 7-51-2302, then the comptroller of the treasury, or the comptroller's designee, shall refer the utility to the Tennessee board of utility regulation to order reasonable sanctions against the utility; or(2) As described in § 7-51-2301(1) or (2), has not implemented or updated a cyber security plan within the timeframe required by § 7-51-2302, then the comptroller of the treasury, or the comptroller's designee, shall impose reasonable sanctions against the utility.
(1) As described in § 7-51-2301(1), has not implemented or updated a cyber security plan within the timeframe required by § 7-51-2302, then the comptroller of the treasury, or the comptroller's designee, shall refer the utility to the Tennessee board of utility regulation to order reasonable sanctions against the utility; or
(2) As described in § 7-51-2301(1) or (2), has not implemented or updated a cyber security plan within the timeframe required by § 7-51-2302, then the comptroller of the treasury, or the comptroller's designee, shall impose reasonable sanctions against the utility.