1. 1 Crisis Response Task Force (CRTF) Proposal Tom Bowe (Chairman) CSO, PJM Interconnection bowet@pjm.com Scott Heffentrager (Temp. Chairman) Physical Security Mgr., PJM Interconnection heffens@pjm.com Public Release

2. September 2005 2 CIPC – Crisis Response Task Force Why is Task Force Needed? NERC, it’s committees and regions, have developed several emergency response plans in order to be as prepared as possible for unexpected events. NERC, it’s committees and regions, have developed several emergency response plans in order to be as prepared as possible for unexpected events. The Crisis Response Task Force (CRTF) will review the existing plans, identify any gaps, address the gaps and develop a comprehensive plan for use by NERC, and the ESISAC. The Crisis Response Task Force (CRTF) will review the existing plans, identify any gaps, address the gaps and develop a comprehensive plan for use by NERC, and the ESISAC.

3. September 2005 3 CIPC – Crisis Response Task Force Purpose of Task Force Develop a crisis response plan and a procedure to be utilized in the event of a significant outage or crisis involving the operation or operability of the bulk electric system in North America: Develop a crisis response plan and a procedure to be utilized in the event of a significant outage or crisis involving the operation or operability of the bulk electric system in North America: The plan would apply to events whose scope would involve multiple NERC regions; The plan would apply to events whose scope would involve multiple NERC regions; events involving physical or cyber damage or threat. events involving physical or cyber damage or threat.

4. September 2005 4 CIPC – Crisis Response Task Force Intent of the CRTF The current emergency plans are well established and the intent is not to recommend any changes in the existing plans. The current emergency plans are well established and the intent is not to recommend any changes in the existing plans. However, the plans present a piecemeal approach and the scope of the CRTF is to develop a seamless procedure. However, the plans present a piecemeal approach and the scope of the CRTF is to develop a seamless procedure. The CRTF will identify gaps between any existing plans or procedures, identify corrective measures, and include corrective measures in the new procedure. The CRTF will identify gaps between any existing plans or procedures, identify corrective measures, and include corrective measures in the new procedure. The intent is to efficiently supplement the existing resources that are mobilized to manage a crisis from the NERC perspective. The intent is to efficiently supplement the existing resources that are mobilized to manage a crisis from the NERC perspective.

5. September 2005 5 CIPC – Crisis Response Task Force Proposed CRTF Deliverables 1. Interim Procedure - Fundamentals to be used if needed before final procedure is approved. 2. Procedural Elements: A. For use by NERC, ESISAC, CIPC, Electricity Sector B. Key Decision Trees to assist in determining: 1. Event cause - equipment, physical, cyber, malicious 2. If malicious, what type? a. Vandalism b. Terrorism c. Insider d. Ongoing

6. September 2005 6 CIPC – Crisis Response Task Force Proposed CRTF Deliverables (cont.) 3. Scope of event 4. Restoration/recovery strategies 5. Mitigation measures C. Crisis Response Team Roster (updated annually) Geographically disparate members (US & Canada) Geographically disparate members (US & Canada) Known to industry; technical expertise Known to industry; technical expertise D. Lists of resources to assist E. Linkages to ESISAC and NERC Regions F. Linkages to other critical SOPs G. Communications resources (GETS, HSIN, CWIN, etc..)

7. September 2005 7 CIPC – Crisis Response Task Force Proposed CRTF Deliverables (cont.) 3. Support for Procedure from US DOE, US DHS, PSEPC, Natural Resources - Canada 4. Training Program 5. Recommended review and update process.

8. September 2005 8 CIPC – Crisis Response Task Force Draft Work-Plan 2005ACTIONS MayCRTF formed, draft work plan prepared JuneIAWWG and CIPC approve initial work plan July-Sept.Initial meetings held, Charter prepared, elements of interim Procedure developed SeptemberCIPC approve Charter OctoberDevelop Interim Procedure Oct - DecDevelop Procedure DecemberCIPC review Procedure draft 2006 JanuaryFinalize Procedure FebruaryCreate training for Procedure MarchConduct training for Procedure

9. September 2005 9 CIPC – Crisis Response Task Force Current Membership The initial membership of CRTF includes: The initial membership of CRTF includes: Tom BowePJMChair Scott HeffentragerPJMTemporary Chair Tom FlowersCenterpoint Mike HageeDuke Jim McGloneUS DOE Bob JordanUS DOE Stuart BrindleyIESO Stan JohnsonNERC Larry BughECAR Tim O’NeilNatural Resources Canada Dave DarlingNatural Resources Canada If you would like to participate please contact If you would like to participate please contact Scott Heffentrager PJM 610-666-2222 or heffens@pjm.com Scott Heffentrager PJM 610-666-2222 or heffens@pjm.com

10. 10 Crisis Response Task Force (CRTF) Proposal Tom Bowe (Chairman) CSO, PJM Interconnection bowet@pjm.com Scott Heffentrager (Temp. Chairman) Physical Security Mgr., PJM Interconnection heffens@pjm.com