1. NERC and ESISAC Electricity Sector Information Sharing and Analysis Center Update March 2006 CIPC Confidentiality: Public Release

2. 2 Topics ● Self Regulating Organization ● NERC Organization ● Bulk Electric System Situational Awareness ● Communications ● Communications – Electric Power Interdependencies

3. 3 Self Regulating Organization – 1 ● Concept for the Electric Reliability Organization  Self regulating  Audited by FERC and Canadian Authorities ● Standards, compliance, enforcement ● Stakeholder relationships ● Technical excellence ● Continuous reliability improvement ● Performance monitoring

4. 4 Self Regulating Organization – 2 ● ERO application filing to FERC and Canadian Authorities: 04 April 2006 ● Conditional acceptance: date tbd ● Formal ERO: January 2007 ● There are currently 104 Standards

5. 5 NERC Organization - 1 ● Programmatic  Standards  Compliance and Organization Certification  Reliability Readiness  Education and Operator Certification  Reliability Assessment and Performance Analysis  Situational Awareness and Infrastructure Security

6. 6 NERC Organization - 2 ● Functions  Members’ Forums  Information Technology  Legal and Regulatory  Human Resources  Finances and Accounting

8. 8 NERC Organization - 3 ● Focus on programs; committees support programs ● Technical expertise of industry; industry sets the rules ● Committees and Forums are portals Stakeholders ERO ● Program committees: SAC, CCC, CIPC, + ● General committees: OC, PC ● Alignment of committees with programs is a task ahead

9. 9 Situational Awareness – 1 ● OF: Bulk Electric System (BES) ● BY: Operators, Government, ESISAC ● FOR: An event of any causation that is oExpected oOccurring oUnder restoration oUnder study ● TO: Help facilitate fast, appropriate actions by each entity as called for by its roles (Note: This does not directly involve the operational analysis currently performed by operations.)

10. 10 Situational Awareness – 2 ● Frequency and ACE monitoring and alarms ● Reports: RCIS, CIPIS, telephone, email ● CNN ● EPACT 2005, Section 1839: Proposed Transmission Monitoring System  DOE – FERC – NERC  Phasor Measurement Unit project  North America Electric Infrastructure SECurity (NESEC) System and NESEC +

12. 12 Communications – 1 ● Cyber Storm  Exercise in brief: objectives, participants (anonymized), actions  Lessons learned  Refer to agenda materials  Communications must be focused to recipients and succinct, avoiding repetition while assuring requisite information dissemination  “Push” alerts and communications  Homeland Security Information Network (HSIN) (and mdl)  Electricity Sector Threat Alert Levels (Physical and Cyber) change process needs review

13. 13 Communications – 2 ● Requests For Information (RFI)  Use ESISAC as point of contact; minimize operator burdens  Formalize (e.g. for hurricanes); use HSIN ● Communications between IC and CI (NIAC study group) ● Use established relationships (at least organizationally) ● Provide sector subject matter expertise

14. 14 Communications – 3 ● Critical infrastructure Warning Information Network (CWIN)  Status, train, test, use ● US-CERT ES Portal ● ISERnet: DOE Infrastructure Security and Energy Restoration

15. 15 Telecommunications – Electric Power Interdependencies ● National Security Telecommunications Advisory Committee (NSTAC) task force ● Near-term report: emergency responders, fuel supplies, emergency coordination, information sharing ● Long-term report: detail consideration of impacts of a long-term outage, dependencies, inter- dependencies ● Electricity Sector dependence on communications providers: study, who? TY