1. Generation assets important to the reliable operation of the Bulk Electric System What does this mean?

2. Definitions Critical Assets: Facilities, systems, and equipment which, if destroyed, degraded, or otherwise rendered unavailable, would affect the reliability or operability of the Bulk Electric System. Bulk Electric System (per NERC reliability definition): The electrical generation resources, transmission lines, interconnections with neighboring systems, and associated equipment, generally operated at voltages of 100 kV or higher. Radial transmission facilities serving only load with one transmission source are generally not included. Requirements (CIP-002) R1.2. The risk-based assessment shall consider the following assets: R1.2.1. Control centers and backup control centers performing the functions of the entities listed in the Applicability section of this standard. R1.2.3. Generation resources that support the reliable operation of the Bulk Electric System. R1.2.4. Systems and facilities critical to system restoration, including blackstart generators and substations in the electrical path of transmission lines used for initial system restoration. R1.2.7. Any additional assets that support the reliable operation of the Bulk Electric System that the Responsible Entity deems appropriate to include in its assessment.

3. Area A — The entire Electric System including Transmission, Distribution, Bulk Electric System, Generation, and Market Systems. Circle 1 — Bulk Electric System, as defined by NERC. Circle 2 — Critical Assets, as identified by the Responsible Entity. Many Critical Assets are also part of the Bulk Electric System (Areas B, D, F), but not all (Areas C, E). Circle 3 — Critical Cyber Assets supporting all the Critical Assets as identified by the Responsible Entity. Shown are Critical Cyber Assets supporting the Bulk Electric System (Areas D, F) and Critical Cyber Assets not supporting the Bulk Electric System (Area E). Area F — Indicates Critical Cyber Assets that support the Bulk Electric System within the scope of the NERC Cyber Security Standards. Area G — Cyber Assets covered by the NERC Cyber Security Standard CIP–007 because of their network connectivity with Critical Cyber Assets that support the Bulk Electric System.

4. Discussion Cyber attack methods introduce different risks than traditional reliability issues Once access is gained to connecting networks multiple units/facilities can be effected/attacked simultaneously Existing analysis does not consider this scenario What Generation facilities should be considered? Black start units (under contract) RMR or possible RMR Units Others? Stations with generation larger than largest single contingency (2300 MWs) Common control systems? Network? QSE Control centers controlling any identified critical assets

5. Action Items For consideration we discussed 1)Black Start Units 2)RMR or Potential RMR Units 3)Stations with greater than 2300 MWs of Generation 4)Units connected by a common network totaling greater than 2300 MWs Ken Donohoo of ERCOT will run analysis based on the criteria above.

6. Next Steps Review the results of ERCOT analysis related to the effects due to the loss of large amount of Generation Decide as a group what criteria should be recommended for consideration for defining Generation Critical Assets