CONSOLIDATED EDISON INC

The NYISO is a not-for-profit organization that controls and directs the operation of most of the electric transmission facilities in New York State, including those of the Utilities, as an integrated system. It also administers wholesale markets for electricity in New York State and facilitates the construction of new transmission it considers necessary to meet identified reliability, economic or public policy needs. The New York State Reliability Council (NYSRC) promulgates reliability standards subject to FERC oversight, and the NYISO has agreed to comply with those standards. Pursuant to a requirement that is set annually by the NYSRC, the NYISO requires that entities supplying electricity to customers in New York State have generating capacity (owned, procured through the NYISO capacity markets or contracted for) in an amount equal to the peak demand of their customers plus the applicable reserve margin. In addition, the NYISO has determined that entities that serve customers in New York City must procure sufficient capacity from resources that are electrically located in New York City to cover a substantial percentage of the peak demands of their New York City customers. The NYISO also requires entities that serve customers in the Lower Hudson Valley and New York City customers that are served through the Lower Hudson Valley to procure sufficient capacity from resources electrically located in the Lower Hudson Valley. These requirements apply both to regulated utilities such as CECONY and O&R for the customers they supply under regulated tariffs and to other load serving entities that supply customers on market terms. See “CECONY – Electric Operations – Electric Supply” and “O&R – Electric Operations – Electric Supply,” below.

Cyber Regulation

The Companies are subject to cyber regulation by federal agencies, including FERC, the Transportation Security Agency and the Cybersecurity and Infrastructure Security Agency. The Utilities are subject to cyber regulation by the NYSPSC, that under the New York Public Service Law, is authorized to evaluate annually the utility’s customer privacy protections, including, but not limited to, customer electric and gas consumption data, and protection of critical energy infrastructure. In March 2023, the New York State legislature amended the New York State Public Service Law, directing the NYSPSC to develop rules to direct electric and gas utilities to, among other things, protect customer privacy, including customer consumption data, from unauthorized disclosure; (ii) develop and implement tools to monitor operational control networks to detect unauthorized network behavior; and (iii) mandate that utilities’ emergency response plans include cyberattack response plans. O&R’s subsidiary, RECO, is subject to cyber regulation by the NJBPU. See “The Companies Are Extensively Regulated And Are Subject To Penalties” and "A Cyber Attack Could Adversely Affect the Companies" in Item 1A and Item 1C: Cybersecurity.