Electrical meter security audits since 2009 (Tacoma)

Dear Mr. Mocek,

Thank you for your public records request, which has been assigned the above referenced tracking number, and routed to the appropriate departments for compilation of documents.

The Tacoma Public Utilities received your May 20, 2016 public disclosure request where you specifically request the following:

1. Any and all records related to security audits (e.g., device and network penetration testing, confirmation of tamper-resistance, etc.) performed of electrical meters and related equipment (e.g., automated meter reader devices, advanced metering infrastructure networking equipment, etc.) since May 21, 2009, along with metadata.

The length of time it takes to conduct a records search largely depends upon the complexity of the request and storage location(s). We are attempting to locate and assemble the materials requested and to determine whether any of the documents are exempt from disclosure and we anticipate that we should have responsive documents available (or an update of the progress to locate, assemble and review the records if it will take longer) on or before Friday, June 24, 2016. If there are questions, or delays we will contact you accordingly.

If you have any questions, please contact me at 253/779-7090.

Sincerely,

James Kauffman | Tacoma Public Utilities
Management Services, Public Disclosure
Public Records Officer/Records Management Supervisor
jkauffman@ci.tacoma.wa.us<mailto:jkauffman@ci.tacoma.wa.us>
P: (253) 779-7090
F: (253) 502-8598

All e‐mail communications with the Tacoma Public Utilities are subject to disclosure under the Public Records Act and should be presumed to be public.
---------------------------------------------------------------------------------------------------------------------

Dear Mr. Mocek,

I am in response to your June 10, 2016 email we are still locating, assembling and reviewing the materials requested and we are determining whether any of the documents are exempt from disclosure. As I stated in my May 26, 2016 email we anticipate that we should have responsive documents available on or before Friday, June 24, 2016. If there are questions, or delays we will contact you accordingly.

If you have any questions, please contact me at 253/779-7090.

Sincerely,

James Kauffman | Tacoma Public Utilities
Management Services, Public Disclosure
Public Records Officer/Records Management Supervisor
jkauffman@ci.tacoma.wa.us<mailto:jkauffman@ci.tacoma.wa.us>
P: (253) 779-7090
F: (253) 502-8598

All e‐mail communications with the Tacoma Public Utilities are subject to disclosure under the Public Records Act and should be presumed to be public.
---------------------------------------------------------------------------------------------------------------------

Dear Mr. Mocek,

Per your request, we have conducted a search for “records related to security audits (e.g., device and network penetration testing, confirmation of tamper-resistance, etc.) performed of electrical meters and related equipment (e.g., automated meter reader devices, advanced metering infrastructure networking equipment, etc.) since May 21, 2009.” We have located records for a penetration test conducted for meter related equipment.

We are informing you that more time is required to process this request. The test was performed by a contractor. Per our contract, Tacoma is providing ten day written notice to the contractor of the anticipated release of the penetration testing documents.

Also, we are determining whether any of the documents are exempt from disclosure and we anticipate that we should have responsive documents available for release on or before Friday, July 15, 2016. If there are questions, or delays we will contact you accordingly.

If you have any questions, please contact me at 253/779-7090.

Thank you for your patience and cooperation,

James Kauffman | Tacoma Public Utilities
Management Services, Public Disclosure
Public Records Officer/Records Management Supervisor
jkauffman@ci.tacoma.wa.us<mailto:jkauffman@ci.tacoma.wa.us>
P: (253) 779-7090
F: (253) 502-8598

All e‐mail communications with the Tacoma Public Utilities are subject to disclosure under the Public Records Act and should be presumed to be public.
---------------------------------------------------------------
May 20, 2016
Tacoma Public Utilities
ATTN: Public Records Officer
Tacoma Public Utilities
Management Services Office
PO BOX 11007
TACOMA WA 98411-0007
To Whom It May Concern:
Pursuant to RCW Ch. 42.56 (Public Records Act), I hereby request the following records:
Any and all records related to security audits (e.g., device and network penetration testing, confirmation of tamper-resistance, etc.) performed of electrical meters and related equipment (e.g., automated meter reader devices, advanced metering infrastructure networking equipment, etc.) since May 21, 2009, along with metadata.
The requested documents will be made available to the general public, and this request is not being made for commercial purposes.
In the event that there are fees, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not.
Thank you in advance for your anticipated cooperation in this matter. I look forward to receiving your response to this request within 5 business days, as the statute requires.
Sincerely,
Phil Mocek
------
Filed via MuckRock.com
E-mail (Preferred): requests@muckrock.com<mailto:requests@muckrock.com>
For mailed responses, please address (see note):
MuckRock
DEPT MR 25815
411A Highland Ave
Somerville, MA 02144-2516
PLEASE NOTE: This request is not filed by a MuckRock staff member, but is being sent through MuckRock by the above in order to better track, share, and manage public records requests. Also note that improperly addressed (i.e., with the requester's name rather than "MuckRock News" and the department number) requests might be returned as undeliverable.
------
[Image removed by sender.]

Dear Mr. Mocek,

We have processed your May 20, 2016, request and searched for “any and all records related to security audits (e.g., device and network penetration testing, confirmation of tamper-resistance, etc.) performed of electrical meters and related equipment (e.g., automated meter reader devices, advanced metering infrastructure networking equipment, etc.) since May 21, 2009, along with metadata.” We located a network penetration assessment report that is responsive to your request. We did not locate any other responsive documents.

We have reviewed the Information Technology Security Assessment 2010 report and have determined the entire documents is exempt from disclosure under RCW 42.56.420(4). The reason is this report is a security risk assessment and contains computer access paths, codes, IP addresses, and similar information the release of which would compromise the security of Tacoma’s computer and telecommunication systems and information. Please refer to the enclosed Privilege Log. This request is now closed; however, if you believe there are other records responsive, please contact me immediately.

You may file an appeal by emailing the City Clerk’s Office at pdr@cityoftacoma.org<mailto:pdr@cityoftacoma.org>. Please cite the PDR number assigned to your request so that it may be identified easily.

If you have any questions, please contact me at 253/779-7090.

Sincerely,

James Kauffman | Tacoma Public Utilities
Management Services, Public Disclosure
Public Records Officer/Records Management Supervisor
jkauffman@ci.tacoma.wa.us<mailto:jkauffman@ci.tacoma.wa.us>
P: (253) 779-7090
F: (253) 502-8598

All e‐mail communications with the Tacoma Public Utilities are subject to disclosure under the Public Records Act and should be presumed to be public.
---------------------------------------------------------------------------------------------------------------------