1. Update in NERC CIP Activities September 4, 2014

2. 2 Update on CIP-014-1 Update on Revisions to CIP Version 5  -x Posting  v6 Posting Questions Agenda

3. NOPR for FERC Approval IssuedJuly 17  Comments DueSept 8  Comment ResponsesSept 22 Adopted by NERC Board of Trustees May 13 Approved by Industry Final BallotMay 5 FERC Directive March 7 Key Dates: Project 2014-04 Physical Security (CIP-014-1)

4. CIP Standards Revisions  45-day comment period Sept 3 – Oct 17​  Ballot Oct 8-17  Non-Binding Poll (VRF/VSL) Oct 8-17  RSAWsSept 17**  SDT meeting, Austin TXOct 22-24  Final BallotOct 31 – Nov 10** **Expected date Key Dates CIP-002 to CIP-011 Revisions

5. CIP-003-6 R2 for Low Impact Assets  Requires implementation of one or more documented cyber security plan(s)  Attachment 1 includes required elements or options that may be selected to address: o Cyber security o Physical access controls o Electronic access controls o Cyber Security Incident response  Attachment 2 includes detailed measures for demonstrating compliance  Introduces 2 new definitions o Low Impact BES Cyber System Electronic Access Points (LEAP) o Low Impact External Routable Connectivity (LERC) Significant Changes to CIP-003-6

6. CIP-010-2 R4 for Transient Devices  Requires implementation of one or more documented plan(s)  Attachment 1 includes required elements or options that may be selected to address: o Transient Cyber Asset(s) Owned or Managed by the Responsible Entity o Transient Cyber Asset(s) Owned or Managed by Vendors or Contractors o Removable Media  Attachment 2 includes detailed measures for demonstrating compliance  Modifies 2 definitions, based on comments o Transient Cyber Asset o Removable Media Significant Changes to CIP-010-2

7. Single ballot for IAC language removal.  These proposed standards will be version X for the ballot. o CIP-003-X o CIP-004-X o CIP-007-X o CIP-010-X o CIP-011-X Separate ballots for language changes  Low Impact Assets and Transient Devices. o CIP-003-6 o CIP-010-2 o Definitions – Lows o Definitions – TD o IP-v6 CIP-002 to CIP-011 Revision Postings

9. 9

10. Project 2014-02 CIP Standards Version 5 Revisions  http://www.nerc.com/pa/Stand/Pages/Project-2014-XX-Critical- Infrastructure-Protection-Version-5-Revisions.aspx http://www.nerc.com/pa/Stand/Pages/Project-2014-XX-Critical- Infrastructure-Protection-Version-5-Revisions.aspx Project 2014-04 Physical Security  http://www.nerc.com/pa/Stand/Pages/Project-2014-04-Physical- Security.aspx http://www.nerc.com/pa/Stand/Pages/Project-2014-04-Physical- Security.aspx References