1. Security Guidelines Working Group Update
Public Release
Security Guidelines Working Group Update
CIPC Meeting
Denver CO
September 29, 2005
Seiki Harada
SGWG Chair

2. Discussion Item:
Decision Items: 1
SGWG Name Change 2
SGWG Membership Renewal 3
CIPC Document Review Process 4
Review of the Threat Alert Physical Response Guideline
Information Items: 6
SGWG Business Objectives for 2005 7
Guidelines Review Status 8
Succession Plan - SGWG Chair

3. Working Group Name Change
The CIPC meeting of 2005 June precluded ‘standard’ documents from the review responsibility of SGWG.
Based on this, in May 17, CIPC endorsed dropping ‘S’ from SGWG, and make it GWG.
The working group had a second thought about the abbreviation. We now seek approval to keep the SGWG abbreviation and interpret the first character as “Security”.

4. SGWG Membership Renewal:
The Issue:
There are 23 names on the current SGWG roster
NERC meeting procedure requires:
a quorum of 2/3 of the registered member
2/3 majority for a decision making
In any of the SGWG meetings in the past, we were not able to attain the quorum

5. SGWG Membership Renewal:
The Proposal:
Voting Members:
6 – 8 members representing Operations, Cyber Security, Physical Security.
Non-voting contributors

6. CIPC Document Review Process
Discussion Points:
In the June 2005 CIPC meeting, a process flow diagram for SGWG document review was endorsed (see next foil).
CIPC still needed a higher level process of which the SGWG process is a part. We propose such a process for approval.

7. CIPC Document Review Process

8. Security Guideline Process Flow
Origin-
ator
CIPC
EXEC WG
or TF
SGWG
CIPC
EXEC
CIPC
NERC
Board
CIPC
Need
Review
Approve
Prioritize
Owner
Sponsor
Resources
Scope
Draft
Content
Expertise
Iterate w/Industry
Format
Consistency
Terminology
Review
Adopt
Distribute
Train
Cycle
Track Guideline Status and Progress
Post for Final Review
Facilitate Vote
Initiate Review on 2 Year Cycle
NERC
Staff

9. Updated Guideline DRAFT:
Agenda
Discussion and approval of the combined guidelines, “Threat Alert System and Physical Response” Version 2.1
This guideline is a combination of:
Threat Alert System and Physical Response Guidelines for the Electric Sector Version 2.0
Threat Response Version 2.0

10. SGWG Objectives for 2005 Target: Status: 1
Secure endorsement for the standard document shell for CIPC guidelines
Complete 2
Identify CIPC document types and define as to purpose, application rules, relationships with other documents 3
Review existing guidelines and recommend for updating or discontinuance 4
Recommend streamlining of reviewing and approving CIPC guidelines
In progress 5
On-going reviews of guidelines and other documents
On-going

11. Status of Document Reviews
Refer to the Word document:
“Guideline Review Status”
Discussion Points:
Reviewed 10 guidelines in March 2005
5 more reviewed by Sep 2005
All of guidelines over ~ 12 months are reviewed now.
Assignments for drafting new versions and reviews of the new versions to follow.

12. Succession Plan – SGWG Chair:
Discussion Points:
The incumbent is packing it in, in six months
Preferred transition target: January
Any volunteers?