Update in NERC CIP Activities September 4, 2014. 2 Update on CIP-014-1 Update on Revisions to CIP Version 5  -x Posting  v6 Posting Questions Agenda.

Slides:

Advertisements

Similar presentations

NERC Cyber Security Standards Pre-Ballot Review. Background Presidents Commission on Critical Infrastructure Protection PDD-63 SMD NOPR NERC Urgent Action.

Advertisements

Federal Energy Regulatory Commission July Cyber Security and Reliability Standards Regis F. Binder Director, Division of Logistics & Security Federal.

Frequency Responsive Reserve Process Update

Bulk Electric System Definition Task Force Update Reliability Policy Issues Committee April 28, 2010 Brian Theaker BESDTF Chair.

Interpreting Regional Criteria and Regional Standards Brian Silverstein Board of Directors April, 2010.

Definitional Exclusions Reporting Process. 2 Anticipated process to be communicated in coming months (Webinars, Special Outreach, etc.) Working with WICF.

NERC PC Issues Update WECC PCC Meeting John Simpson, RRI Energy Planning Coordination Committee Seattle, WA June , 2010.

CIP Version 5 Transition Guidance September 2013 Open-Webinar

STATUS OF BULK ELECTRIC SYSTEM DEFINITION PROJECT

CIP Cyber Security – Security Management Controls

Key Reliability Standard Spot Check Frank Vick Compliance Team Lead.

Allan Wick, CFE, CPP, PSP, PCI, CBCP Chief Security Officer WECC Joint Meeting October 8, 2014.

Project Definition of Bulk Electric System & Bulk Electric System Rules of Procedure Development Presenter: Peter Heidrich, FRCC – BES Drafting.

COM Operating Personnel Communications Protocols

Steve Rueckert Director of Standards Standards Update June 5, 2014 Joint Guidance Committee Meeting Salt Lake City, UT.

Recent NERC Standards Activities RSC – Jan. 5, 2011 NSRS Update Date Meeting Title (optional)

Brent Castagnetto Manager, Cyber Security Audits & Investigations Team CIP v5 Implementation Guidance CIP v5 Roadshow Salt Lake City, UT May 14-15, 2014.

State of Standards and Standards in Development Sean Cavote, Manager of Standards Development WECC Operating Committee Meeting March 26, 2015.

Project Cyber Security Order 706 January 10, 2012 Most of the material presented has been compiled from NERC webinars and drafting team meetings.

Bryan J. Carr, PMP, CISA Compliance Auditor, Cyber Security

1. 11/26/2012: NERC Board of Trustees adopted CIP v5 CIP thru CIP CIP and CIP Version 5 Filing FERC requested filing by 3/31/2013.

CIP Version 5 Update OC Meeting November 7, 2013.

Physical Security CIP NERC Standing Committees December 9-10, 2014.

Cyber Security Standard Workshop Status of Draft Cyber Security Standards Larry Bugh ECAR Standard Drafting Team Chair January 2005.

Critical Infrastructure Protection Update Christine Hasha CIP Compliance Lead Advisor, ERCOT TAC March 27, 2014.

Update in NERC CIP Activities June 5, Update on CIP Update on Revisions to CIP Version 5 –BES Cyber Asset Survey –Implementation Plan Questions.

Current Status Of The ERO Transition Activities To Comply With The 2005 EPAC ERCOT Board Meeting February 21, 2006 Sam Jones, COO.

Lisa Wood, CISA, CBRM, CBRA Compliance Auditor, Cyber Security

Federal Energy Regulatory Commission June Cyber Security and Reliability Standards Regis F. Binder Director, Division of Logistics & Security Federal.

Nuclear Power Plant/Electric Grid Regulatory Coordination and Cooperation - ERO Perspective David R. Nevius and Michael J. Assante 2009 NRC Regulatory.

1 Remote Access Update ReliabilityFirst CIP Webinar Thursday, September 30, 2010 Lew Folkerth, Senior Engineer - Compliance.

Implementing the New Reliability Standards Status of Draft Cyber Security Standards CIP through CIP Larry Bugh ECAR Standard Drafting Team.

SPP.org 1. EMS Users Group – CIP Standards The Compliance Audits Are Coming… Are You Ready?

Project Definition of Bulk Electric System Presenter: Peter Heidrich – Drafting Team Chair Date: March 1, 2011.

1. 2 NERC Bulk Electric System (BES) Definition (NERC Glossary of Terms Used in Reliability Standards) FERC Order 693 FRCC Handbook Review Task Force.

Critical Infrastructure Protection Update Christine Hasha CIP Compliance Lead Advisor, ERCOT TAC March 27, 2014.

Project System Protection Coordination Requirement revisions to PRC (ii) Texas Reliability Entity NERC Standards Reliability Subcommittee.

Board of Directors Meeting February 26, 2013 Standards, Registration and Certification Report.

Project (COM-001-3) Interpersonal Communications Capabilities Michael Cruz-Montes, CenterPoint Energy Senior Consultant, Policy & Compliance, SDT.

Paragraph 81 Project. 2RELIABILITY | ACCOUNTABILITY Background FERC March 15, 2012 Order regarding the Find, Fix, Track and Report (FFT) process  Paragraph.

Project Cyber Security Order 706 Version 5 CIP Standards Potential to Adversely Impact ERCOT Black Start Capability.

Date CIP Standards Update Chris Humphreys Texas RE CIP Compliance.

NERC Project S ystem Protection Coordination - PRC-027 Presentation to the NSRS Conference Call August 17, 2015 Sam Francis Oncor Electric Delivery.

Project – Alignment of Terms WECC Joint Meeting July 15, 2015.

Employee Privacy at Risk? APPA Business & Financial Conference Austin, TX September 25, 2007 Scott Mix, CISSP Manager of Situation Awareness and Infrastructure.

ISPE Cyber Security S99 Update December 08, 2009.

NERC Project S ystem Protection Coordination - PRC-027 Presentation to the NSRS Conference Call April 20, 2015 Sam Francis Oncor Electric Delivery.

Page 1 of 13 Texas Regional Entity ROS Presentation April 16, 2009 T EXAS RE ROS P RESENTATION A PRIL 2009.

Compliance Update September Control Performance Highlights  NERC CPS1 Performance ERCOT’s August score was ERCOT’s CPS1 scores show significant.

NERC Project PRC-005 FERC Order No. 803 Directive Presentation to the NSRS Conference Call August 17, 2015 Sam Francis Oncor Electric Delivery.

Projects System Protection Coordination Draft 2 of TOP Texas Reliability Entity NERC Standards Reliability Subcommittee November 2, 2015.

Standards Update Merrill Brimhall Staff Engineer W ESTERN E LECTRICITY C OORDINATING C OUNCIL.

Darren T. Nielsen M.Ad, CPP, CISA, PCI, PSP, CHPP, CBRA, CBRM Senior Compliance Auditor, Cyber & Physical Security V5/FERC Order 822 updates February 25,

NERC Transmission System Vegetation Management Standard ERCOT TAC Update Mike Boone – CenterPoint Energy John Schechter – AEP August 4, 2005 Austin, TX.

1 Standards and Construction Specifications Manual Orange County Utilities February 13, 2007.

Reliability Standard TPL Transmission System Planned Performance for Geomagnetic Disturbance Events September 28, 2016 TPL Standard Status.

Standards Subject to Future Enforcement 2017

Rachel Coyne Manager, Reliability Standards Program

COM Operating Personnel Communications Protocols

Planning Geomagnetic Disturbance Task Force (PGDTF) Update to the ROS

Merrill Brimhall – Engineer, Staff

NERC CIP Implementation – Lessons Learned and Path Forward

NERC Cyber Security Standards Pre-Ballot Review

Larry Bugh ECAR Standard Drafting Team Chair January 2005

Larry Bugh ECAR Standard Drafting Team Chair January 2005

Cyber System-Centric Approach To Cyber Security and CIP

Reliability Standards Development Plan

Larry Bugh ECAR Standard Drafting Team Chair June 1, 2005

North America Energy Standards Board

Standards Development Process

Presentation transcript:

Update in NERC CIP Activities September 4, 2014

2 Update on CIP Update on Revisions to CIP Version 5  -x Posting  v6 Posting Questions Agenda

NOPR for FERC Approval IssuedJuly 17  Comments DueSept 8  Comment ResponsesSept 22 Adopted by NERC Board of Trustees May 13 Approved by Industry Final BallotMay 5 FERC Directive March 7 Key Dates: Project Physical Security (CIP-014-1)

CIP Standards Revisions  45-day comment period Sept 3 – Oct 17  Ballot Oct 8-17  Non-Binding Poll (VRF/VSL) Oct 8-17  RSAWsSept 17**  SDT meeting, Austin TXOct  Final BallotOct 31 – Nov 10** **Expected date Key Dates CIP-002 to CIP-011 Revisions

CIP R2 for Low Impact Assets  Requires implementation of one or more documented cyber security plan(s)  Attachment 1 includes required elements or options that may be selected to address: o Cyber security o Physical access controls o Electronic access controls o Cyber Security Incident response  Attachment 2 includes detailed measures for demonstrating compliance  Introduces 2 new definitions o Low Impact BES Cyber System Electronic Access Points (LEAP) o Low Impact External Routable Connectivity (LERC) Significant Changes to CIP-003-6

CIP R4 for Transient Devices  Requires implementation of one or more documented plan(s)  Attachment 1 includes required elements or options that may be selected to address: o Transient Cyber Asset(s) Owned or Managed by the Responsible Entity o Transient Cyber Asset(s) Owned or Managed by Vendors or Contractors o Removable Media  Attachment 2 includes detailed measures for demonstrating compliance  Modifies 2 definitions, based on comments o Transient Cyber Asset o Removable Media Significant Changes to CIP-010-2

Single ballot for IAC language removal.  These proposed standards will be version X for the ballot. o CIP-003-X o CIP-004-X o CIP-007-X o CIP-010-X o CIP-011-X Separate ballots for language changes  Low Impact Assets and Transient Devices. o CIP o CIP o Definitions – Lows o Definitions – TD o IP-v6 CIP-002 to CIP-011 Revision Postings

9

Project CIP Standards Version 5 Revisions  Infrastructure-Protection-Version-5-Revisions.aspx Infrastructure-Protection-Version-5-Revisions.aspx Project Physical Security  Security.aspx Security.aspx References