The Rochester Public Utility (RPU) Board met on June 23, 2026, at 4:00 p.m. at the RPU Community Room. The meeting covered consent agenda approvals, a bid award for water tower rehabilitation, adoption of updated electric service rules, approval of up to $20 million for gas turbine recovery, informational reports on power delivery and capacity auction results, and a policy review on financial policies. The regular session adjourned at 6:30 p.m., followed by two closed executive sessions.
Consideration of Bids – Apache Tower #87 Rehabilitation and Repainting (Project #2026-06)
2026 Electric Service Rules and Regulations Update
Cascade Creek Gas Turbine 1 Recovery
Informational – 2025 Power Delivery Engineering & Operations Report
Informational – MISO Annual Capacity Auction Results for Planning Year 2026/27
Board Policy Review – Policy 32: Financial Policies
Any discussion? All in favor, please signify by saying aye. Aye. Aye. Aye. Any opposed? The agenda is approved. The next item in the meeting is our safety moment. And we have our safety moment with our director of information technology. Thank you much, Malachi. If you'll notice on your not with your packet, but we actually have Swedish fish. That's what we had initially done when we started kind of doing some of the cybersecurity training when folks would detect a message that was that was fishing. And the reason I kind of bring that up, and the reason we still kind of even do this to this day is that fishing is still obviously the most effective way that attackers get into an organization. So basically, you're like, well, it seems really basic. Uh the truth is it's still the number one threat. And so the FBI's uh what is it, Internet Crime Complaint Center or IC3 has basically said that yeah, the the business email compromise is is the most likely way that people get in. And so just kind of want to reinforce that um with you guys. Uh some of the stuff that I have also in front of you is some social engineering pieces, little things to look for, uh, things to look out for as far as a sense of urgency. Um and I think really kind of the important piece really is that these these business email compromise attacks that they happen to have, um, they don't tend to succeed because the technology failed. They tend to succeed because they take advantage of our busy lifestyles, our schedules, and they kind of hit us at just the right moment, and that's exactly what they're looking for. So for board members, it's actually really important because you're uh you could potentially get an email from the general manager, the CEO, another board member, things along those lines, and it just happens to hit at just the right time uh when people are susceptible to it. So the biggest pieces is and one that I want to elicit for you guys is that uh whenever you get one of these and you want to verify that something's legitimate, use a separate channel. So you use a known phone number of the person who's writing a message, do a separate chat. Uh, whatever you do, don't reply back to the email saying, hey, is this really Tim McCullough? No, probably not. The attacker's just gonna say that they are. So um you have to use those right away. On the backside of that piece of paper, though, um, actually have what we had previously done as a fish when we first started this program just last year. Um, so you'll see some of the items are are kind of elicited on there that uh the sense of urgency, uh Tim's name is spelled incorrectly, things along those lines. And some of these new phishing messages can get pretty tricky. So just because there aren't any red flags doesn't really mean that the message is safe. You know, sometimes these messages are really well polished and it's really hard for you to find these things. But a good thing to remember is trust but verify. So um so tonight's takeaway is you know, please just enjoy the Swedish fish, but don't take the bait, right? Um, when an email creates urgency, asks for action or change in a normal process, stop and verify things. So have any questions, please let me know. Otherwise, I have more Swedish fish in my desk if you do really set. Thank you, guys. Thank you so much. That came up last week when I had a docusign item to sign. I didn't recognize the source and actually was able to call Tim quick and just confirm. Am I supposed to sign this? And you know, of course it was all fine, but never know. Thank you. Next item on the agenda is our consent agenda. Um the consent agenda items are 3A through 3F, and these include minutes from the May 19 2026 meeting, uh, review of accounts payable, uh fleet vehicle purchase uh V789, articulating telescopic aerial device, uh P972, eminent domain for the mancato to Mississippi River transmission product and a poll inspection contract. Can I get a motion to approve the consent agenda as presented? I'll move to approve as presented. We have a motion. Um is there a second?