1. CSSWG Status Report March 17-18, 2005 CIPC Meeting Long Beach, CA
Public Release
CSSWG Status Report March 17-18, 2005 CIPC Meeting Long Beach, CA
Thomas R. Flowers, P.E.
CSSWG Chair
12/27/2018
CEII Level: Public Release

2. 11/11-12/04 CIPC Meeting Kansas City, MO
12/27/2018
CEII Level: Public Release

3. CEII Level: Public Release
11/30/04 ISA Common Ground CC
Established “baby steps” for liaison
Focus on document exchange and review
Rules of Engagement needed (NDA)
NDA drafted 2/28/05
12/27/2018
CEII Level: Public Release

4. CEII Level: Public Release
12/3/04 AGA Common Ground CC
Established contacts within NERC (Flowers & Bugh)
Identified AGA – 12 testing as start
Discussed upcoming demo at PNL
12/27/2018
CEII Level: Public Release

5. 12/9/04 Meeting with Delores Etter USNA Biometrics Lab. Annapolis, MA
Flowers, Beahm, & Sypult
Mostly applied research on biometrics
Primary focus on Iris scan and facial recognition
Reciprocal visit offered
12/27/2018
CEII Level: Public Release

6. 12/17/04 Kick-Off IS-Encryption GL Development CC
Focus on “point-to-point” using PGP
Awareness of need to encrypt CII in transit
“How to” language
Electric Sector Public Key Server
12/27/2018
CEII Level: Public Release

7. CEII Level: Public Release
1/11/05 NSTB Project Managers on 2005 Work Plan and Roadmap Phoenix, AR
Reviewed Roadmap and NSTB Work Plan
Focus on deliverables to ES asset owners
Address emerging & legacy technology
Consolidated comments from CSSWG delivered 2/21/2005
12/27/2018
CEII Level: Public Release

8. 1/13/05 CSSWG Meeting Phoenix, AR
2005 CSSWG Work Plan (March 05)
Top Ten Vulnerabilities (March 05)
Patch Mgt. Guideline (June 05)
CS Connectivity Guideline (June 05)
IS – Encryption Guideline (September 05)
NSTB/CSSWG Liaison initiative
12/27/2018
CEII Level: Public Release

9. 1/18/05 CSSWG/Telecom ISAC CC
Established liaison contacts
Identified a need for CS telecommunication infrastructure assessments
Some opportunity for joint WG activity
12/27/2018
CEII Level: Public Release

10. 2/3/05 DHS Cleared Briefing Washington, DC
More focused on the Electric Sector
DHS restructuring
Greatest hacker threat from E. Europe
12/27/2018
CEII Level: Public Release

11. 2/15/05 FERC Dam Conference Fort Worth, TX
Provided links to NERC Guidelines
Discussed NERC Standard Development
Encouraged asset owner participation in CIPC
12/27/2018
CEII Level: Public Release

12. 2/17/05 AGA-12 Testing @ NSTB CC
Discussed specifics of AGA -12 testing
Cryptology testing at Sandia
Performance testing at PNL
NSTB Test Plans would be a deliverable
Must sort out fact from fiction for ES use
12/27/2018
CEII Level: Public Release

13. CEII Level: Public Release
2/22/05 CSSWG WebX
Patch Mgt. Guideline
CS Connectivity Guideline
March 16 Agenda (shortened)
12/27/2018
CEII Level: Public Release

14. 2/24/05 INL/EEI Conference Idaho Falls, ID
NSTB/CSSWG liaison reinforced
Top Ten Vulnerabilities – 2004 will be platform for INL “solutions”
Electric Sector is an INL customer
INL focused on CS security
12/27/2018
CEII Level: Public Release

15. 3/2/05 DHS PCS Forum Governance Board CC
Discussed May 17 & 18 Dallas meeting
NERC document, anti-trust, and NDA policies offered
Will not produce standards or guidelines but offer a vehicle for discussion and networking
12/27/2018
CEII Level: Public Release

16. 3/7/05 DOE/DHS NSTB Roadmap CC
Steering Comm. from ES, O&G, DOE, DHS, Nat. Labs
10 year roadmap for CS in Fall 2005
Invitation only workshop in July 2005
12/27/2018
CEII Level: Public Release

17. 3/17-18/05 CIPC Meeting Long Beach, CA
Top Ten Vulnerabilities – 2004 (approval)
2005 CSSWG Work Plan (approval)
Patch Mgt. Guideline (review)
CS Connectivity Guideline (review)
12/27/2018
CEII Level: Public Release

18. 4/11-13/05 AGA/EEI Salt Lake City, UT
Encourage AGA participation in CIPC
Cyber Security Standards
Discuss EEI/EPRI/NERC/NSTB relationship regarding CS security
12/27/2018
CEII Level: Public Release

19. CEII Level: Public Release
6/9-10/05 CIPC Washington, D.C.
Patch Management Guideline (approval)
CS Connectivity Guideline (approval)
IS – Encryption Guideline (review)
12/27/2018
CEII Level: Public Release

20. CEII Level: Public Release
9/29-30/05 CIPC Denver, CO
IS – Encryption Guideline (approval)
12/27/2018
CEII Level: Public Release