Security Guidelines Working Group Update CIPC Meeting Denver CO September 29, 2005 Seiki Harada SGWG Chair Public Release

SGWG Foil 2 Discussion Item: Decision Items: 1SGWG Name Change 2SGWG Membership Renewal 3CIPC Document Review Process 4Review of the Threat Alert Physical Response Guideline Information Items: 6SGWG Business Objectives for Guidelines Review Status 8Succession Plan - SGWG Chair

SGWG Foil 3 Working Group Name Change 1.The CIPC meeting of 2005 June precluded ‘standard’ documents from the review responsibility of SGWG. 2.Based on this, in May 17, CIPC endorsed dropping ‘S’ from SGWG, and make it GWG. 3.The working group had a second thought about the abbreviation. We now seek approval to keep the SGWG abbreviation and interpret the first character as “Security”.

SGWG Foil 4 SGWG Membership Renewal: The Issue: 1.There are 23 names on the current SGWG roster 2.NERC meeting procedure requires: a quorum of 2/3 of the registered member 2/3 majority for a decision making 3.In any of the SGWG meetings in the past, we were not able to attain the quorum

SGWG Foil 5 SGWG Membership Renewal: The Proposal: Voting Members: 6 – 8 members representing Operations, Cyber Security, Physical Security. Non-voting contributors

SGWG Foil 6 CIPC Document Review Process Discussion Points: 1.In the June 2005 CIPC meeting, a process flow diagram for SGWG document review was endorsed (see next foil). 2.CIPC still needed a higher level process of which the SGWG process is a part. We propose such a process for approval.

SGWG Foil 7 CIPC Document Review Process

SGWG Foil 8 Security Guideline Process Flow Origin- ator CIPC EXEC WG or TF SGWGCIPC NERC Board  Need  Prioritize  Owner  Sponsor  Resources  Scope  Draft  Content  Expertise  Iterate w/Industry  Format  Consistency  Terminology  Review  Adopt  Approve  Distribute  Train  Cycle NERC Staff  Track Guideline Status and Progress  Post for Final Review  Facilitate Vote  Initiate Review on 2 Year Cycle CIPC EXEC  Review

SGWG Foil 9 Updated Guideline DRAFT: Discussion and approval of the combined guidelines, “Threat Alert System and Physical Response” Version 2.1 This guideline is a combination of: 1.Threat Alert System and Physical Response Guidelines for the Electric Sector Version Threat Response Version 2.0 Agenda

SGWG Foil 10 SGWG Objectives for 2005 Target:Status: 1Secure endorsement for the standard document shell for CIPC guidelines Complete 2Identify CIPC document types and define as to purpose, application rules, relationships with other documents Complete 3Review existing guidelines and recommend for updating or discontinuance Complete 4 Recommend streamlining of reviewing and approving CIPC guidelines In progress 5 On-going reviews of guidelines and other documents On-going

SGWG Foil 11 Status of Document Reviews Refer to the Word document: “Guideline Review Status” Discussion Points: 1.Reviewed 10 guidelines in March more reviewed by Sep All of guidelines over ~ 12 months are reviewed now. 4.Assignments for drafting new versions and reviews of the new versions to follow.

SGWG Foil 12 Succession Plan – SGWG Chair: Discussion Points: The incumbent is packing it in, in six months Preferred transition target: 2006 January Any volunteers?