1. WebCast on Draft Cyber Security Standard 1300 October 18, 2004

2. Standard 1300 1200 vs. 1300 Identifying Critical Cyber Assets
Addressing Personnel Issues
Implementation Plan Issues
October 18, 2004
Standard 1300 Webcast

3. 1200 vs. 1300 Two separate standards 1st Qtr 2005 compliance to 1200
1300 uses 1200 as a starting point
1300 intended to “raise the bar”
October 18, 2004
Standard 1300 Webcast

4. Identifying Critical Cyber Assets
Multi-step process (use risk-based analysis)
Identify critical bulk electric facilities
Identify cyber assets at those facilities
Identify critical cyber assets
Not all bulk electric facilities are affected
October 18, 2004
Standard 1300 Webcast

5. Addressing Personnel Issues
What are the issues?
Disclosure of screening results
What to do about/with screening results
Did we go too far?
Used UA 1200, comments to 1200 renewal ballot, 1300 SAR, and Blackout Report as references.
Tried to clarify 1200.
October 18, 2004
Standard 1300 Webcast

6. Implementation Plan Issues
Drafting Team recognizes impact of scope change
Implementation plan will phase in new requirements (need input on realistic time-frames)
October 18, 2004
Standard 1300 Webcast

7. Questions??? http://www.nerc.com/
Contact info:
Larry Bugh – ECAR
October 18, 2004
Standard 1300 Webcast