The recommendations “provide a common starting point for cyber risk reduction activities,” said NARUC Executive Director Greg White.