CSSWG Status Report March 17-18, 2005 CIPC Meeting Long Beach, CA Public Release CSSWG Status Report March 17-18, 2005 CIPC Meeting Long Beach, CA Thomas R. Flowers, P.E. CSSWG Chair 12/27/2018 CEII Level: Public Release

11/11-12/04 CIPC Meeting Kansas City, MO 12/27/2018 CEII Level: Public Release

CEII Level: Public Release 11/30/04 ISA Common Ground CC Established “baby steps” for liaison Focus on document exchange and review Rules of Engagement needed (NDA) NDA drafted 2/28/05 12/27/2018 CEII Level: Public Release

CEII Level: Public Release 12/3/04 AGA Common Ground CC Established contacts within NERC (Flowers & Bugh) Identified AGA – 12 testing as start Discussed upcoming demo at PNL 12/27/2018 CEII Level: Public Release

12/9/04 Meeting with Delores Etter USNA Biometrics Lab. Annapolis, MA Flowers, Beahm, & Sypult Mostly applied research on biometrics Primary focus on Iris scan and facial recognition Reciprocal visit offered 12/27/2018 CEII Level: Public Release

12/17/04 Kick-Off IS-Encryption GL Development CC Focus on “point-to-point” using PGP Awareness of need to encrypt CII in transit “How to” language Electric Sector Public Key Server 12/27/2018 CEII Level: Public Release

CEII Level: Public Release 1/11/05 NSTB Project Managers on 2005 Work Plan and Roadmap Phoenix, AR Reviewed Roadmap and NSTB Work Plan Focus on deliverables to ES asset owners Address emerging & legacy technology Consolidated comments from CSSWG delivered 2/21/2005 12/27/2018 CEII Level: Public Release

1/13/05 CSSWG Meeting Phoenix, AR 2005 CSSWG Work Plan (March 05) Top Ten Vulnerabilities (March 05) Patch Mgt. Guideline (June 05) CS Connectivity Guideline (June 05) IS – Encryption Guideline (September 05) NSTB/CSSWG Liaison initiative 12/27/2018 CEII Level: Public Release

1/18/05 CSSWG/Telecom ISAC CC Established liaison contacts Identified a need for CS telecommunication infrastructure assessments Some opportunity for joint WG activity 12/27/2018 CEII Level: Public Release

2/3/05 DHS Cleared Briefing Washington, DC More focused on the Electric Sector DHS restructuring Greatest hacker threat from E. Europe 12/27/2018 CEII Level: Public Release

2/15/05 FERC Dam Conference Fort Worth, TX Provided links to NERC Guidelines Discussed NERC Standard Development Encouraged asset owner participation in CIPC 12/27/2018 CEII Level: Public Release

2/17/05 AGA-12 Testing @ NSTB CC Discussed specifics of AGA -12 testing Cryptology testing at Sandia Performance testing at PNL NSTB Test Plans would be a deliverable Must sort out fact from fiction for ES use 12/27/2018 CEII Level: Public Release

CEII Level: Public Release 2/22/05 CSSWG WebX Patch Mgt. Guideline CS Connectivity Guideline March 16 Agenda (shortened) 12/27/2018 CEII Level: Public Release

2/24/05 INL/EEI Conference Idaho Falls, ID NSTB/CSSWG liaison reinforced Top Ten Vulnerabilities – 2004 will be platform for INL “solutions” Electric Sector is an INL customer INL focused on CS security 12/27/2018 CEII Level: Public Release

3/2/05 DHS PCS Forum Governance Board CC Discussed May 17 & 18 Dallas meeting NERC document, anti-trust, and NDA policies offered Will not produce standards or guidelines but offer a vehicle for discussion and networking 12/27/2018 CEII Level: Public Release

3/7/05 DOE/DHS NSTB Roadmap CC Steering Comm. from ES, O&G, DOE, DHS, Nat. Labs 10 year roadmap for CS in Fall 2005 Invitation only workshop in July 2005 12/27/2018 CEII Level: Public Release

3/17-18/05 CIPC Meeting Long Beach, CA Top Ten Vulnerabilities – 2004 (approval) 2005 CSSWG Work Plan (approval) Patch Mgt. Guideline (review) CS Connectivity Guideline (review) 12/27/2018 CEII Level: Public Release

4/11-13/05 AGA/EEI Salt Lake City, UT Encourage AGA participation in CIPC Cyber Security Standards Discuss EEI/EPRI/NERC/NSTB relationship regarding CS security 12/27/2018 CEII Level: Public Release

CEII Level: Public Release 6/9-10/05 CIPC Washington, D.C. Patch Management Guideline (approval) CS Connectivity Guideline (approval) IS – Encryption Guideline (review) 12/27/2018 CEII Level: Public Release

CEII Level: Public Release 9/29-30/05 CIPC Denver, CO IS – Encryption Guideline (approval) 12/27/2018 CEII Level: Public Release