Critical Infrastructure Protection Committee Report to NERC Standing Committees in Joint Session Long Beach, CA March 2005 Public Release

Topics Cyber Security Standard CIP-001-009 Larry Bugh Government – Private Sector coordination Pat Laird National Infrastructure Protection Plan Jim McGlone National Response Plan Electricity Sector Info Sharing Analysis Center Lou Leffler

Cyber Security Standard CIP-001-009 61 sets of comments on Draft 2 DT met Mar. 3/4 to review 2 Tech Editors now on board DT meets again Mar. 21/22 Review total package Finalize Draft 3 Finalize draft 2 Implementation Plan

Cyber Security Standard CIP-001-009 Major Areas of work Refine definitions Resolve consistency Match Requirements & measures Extend Implementation Plan Anticipate posting Draft 3 Apr. 15th

Government – Private Sector Coordination Homeland Security Presidential Directive – 7 Department of Homeland Security Sector Specific Agencies Energy: Department of Energy Private Sectors National Infrastructure Protection Plan (Work in process)

Electricity Sector Coordinating Council CIP Committee Executive Committee President / CEO NERC Presented to DHS; awaiting expected affirmation

National Infrastructure Protection Plan NIPP Jim McGlone Department of Energy

National Response Plan NRP Jim McGlone Department of Energy

http://www.esisac.com

http://www. isaccouncil.org

Communications Threat Advisory Listserv (TAL) Critical Infrastructure Protection Information System (CIPIS) Homeland Security Information Network (under development) US-CERT Portal Telephone and conference calls GETS

REPORT INCIDENTS TO 1. LOCAL LAW ENFORCEMENT (Establish and maintain relationship.) 2. LOCAL FBI, PSEPC, RCMP, USSS 3. ESISAC secure messaging: https://www.nerc.net/cip email: esisac@nerc.com tel: 609-452-1422 (anytime) fax: 609-452-9550 (day) 4. National Infrastructure Coordination Center (DHS IAIP) email: nicc@dhs.gov tel: 202-282-9201 fax: 703-487-3570 14

Reports: From the ES, Together with other critical infrastructures, And intelligence sources: May help the DHS to:

Some Things to Think About Does the ESISAC have your 24x7 contact? Are there multiple contact points and communications available? Is a security decision-making process in place? How will your organization’s physical and cyber security decision-makers get notified? Are there backup communications? Is there a means in place to communicate decisions to action-takers? A backup? Consider responses in accordance with the “Threat Alert Systems and Physical / Cyber Response Guidelines for the Electricity Sector”.

TY Activities Back Up Location for ESISAC Telecommunications Electric Service Priority (TESP) program TopOff – 3 TY