Agenda Critical infrastructure Protection Committee

Size: px

Start display at page:

Download "Agenda Critical infrastructure Protection Committee"

Abner Tyler
5 years ago
Views:

1 Agenda Critical infrastructure Protection Committee DHS Sponsored Classified Briefing December 14, :00 a.m.-noon EST Off-Site December 14, :00 p.m. EST to December 15, :00 p.m. Westin Buckhead Atlanta 3391 Peachtree Road NE Atlanta, GA Welcome and Introductions Chair Barry Lawson NERC Antitrust Compliance Guidelines and Public Announcement* Secretary Scott Mix Arrangements Scott Mix Parliamentary Procedures Scott Mix Announcement of Quorum and Proxies Scott Mix Agenda 1. Agenda Review Barry Lawson (Discussion) 2. Minutes from September 14, 2011 Meeting* Scott Mix (Approve) 3. CIPC Chair Report Barry Lawson (Discussion) 4. Elections of CIPC Executive Committee Members-at-Large Jeff Fuller (Vote) 5. NERC / ES-ISAC Update* Matt Blizard & NERC Staff (Discussion) a. NERC CID Director Update b. Electricity Sub-Sector Coordinating Council and PCIS Update c. ISAC Update d. Alerts Update *Background materials included.

2 e. Cyber Security Standards Update a. Version 4 NOPR b. CSO706 Version 5 c. Interpretation Team d. EOP-004 f. Grid Security Conference (GridSecCon) g. Grid Exercise (GridEx) 6. Classified Briefing Review Barry Lawson (Discussion) a. Other Uses of DHS-sponsored Clearances 7. NERC Metrics for CIP Jessica Bian (Discussion) 8. DOE / NERC / NIST Risk Management Framework Brian Harrell (Discussion) 9. Coordinated Action Plan Stuart Brindley (Discussion) a. Cyber Attack Task Force* Mark Engels (Approve) b. Severe Impact Resiliency Task Force Tom Bowe (Discussion) c. Geomagnetic Disturbance Task Force Don Watkins (Discussion) d. Spare Equipment Database Task Force - Follow on actions (Discussion) 10. CIPC Working Group / Task Force Updates a. Control Systems Security Working Group Mark Engels (Discussion) b. Substation Guidelines Task Force* John Breckenridge (Approve for broad industry comment) c. Protecting Sensitive Information Task Force* Nathan Mitchell (Approve for broad industry comment) d. Business Continuity Task Force Barry Lawson (Discussion and retire TF) e. National threat Advisory System Task Force Barry Lawson (Discussion) 11. Adequate Level of Reliability Task Force Kent Kujala & Bob Matthews (Discussion) 12. Bulk Electricity Definition SDT Barry Lawson (Discussion) 13. Washington DC Update Dave Batz (Discussion) a. FERC Technical Conference on CIP-006 CIPC Agenda December 14-15,

3 14. Round Table All (action: Discussion) a. CIPC Strategic Plan Discussion 15. Terrorism Update Ross Johnson (action: Discussion) 16. NESCO / NESCOR Update Chris Jager & Annabelle Lee (action: Discussion) 17. North American Transmission Forum Update Karl Perman (action: Discussion) Agency Reports 18. Department of Homeland Security (action: Discussion) 19. Department of Energy (action: Discussion) 20. Public Safety Canada / Royal Canadian Mounted Police (action: Discussion) 21. Federal Energy Regulatory Commission (action: Discussion) Closing 22. Follow-up Items and Future Actions Barry Lawson (action: Discussion) Future Meetings Scott Mix (action: Discussion) March 7-8, 2012, Phoenix, AZ June 20-21, 2012, Toronto, ON, Canada September 19-20, 2012, St. Louis, MO December 12-13, 2012, Atlanta, GA CIPC Agenda December 14-15,

4 Antitrust Compliance Guidelines I. General It is NERC s policy and practice to obey the antitrust laws and to avoid all conduct that unreasonably restrains competition. This policy requires the avoidance of any conduct that violates, or that might appear to violate, the antitrust laws. Among other things, the antitrust laws forbid any agreement between or among competitors regarding prices, availability of service, product design, terms of sale, division of markets, allocation of customers or any other activity that unreasonably restrains competition. It is the responsibility of every NERC participant and employee who may in any way affect NERC s compliance with the antitrust laws to carry out this commitment. Antitrust laws are complex and subject to court interpretation that can vary over time and from one court to another. The purpose of these guidelines is to alert NERC participants and employees to potential antitrust problems and to set forth policies to be followed with respect to activities that may involve antitrust considerations. In some instances, the NERC policy contained in these guidelines is stricter than the applicable antitrust laws. Any NERC participant or employee who is uncertain about the legal ramifications of a particular course of conduct or who has doubts or concerns about whether NERC s antitrust compliance policy is implicated in any situation should consult NERC s General Counsel immediately. II. Prohibited Activities Participants in NERC activities (including those of its committees and subgroups) should refrain from the following when acting in their capacity as participants in NERC activities (e.g., at NERC meetings, conference calls and in informal discussions): Discussions involving pricing information, especially margin (profit) and internal cost information and participants expectations as to their future prices or internal costs. Discussions of a participant s marketing strategies. Discussions regarding how customers and geographical areas are to be divided among competitors. Discussions concerning the exclusion of competitors from markets. Discussions concerning boycotting or group refusals to deal with competitors, vendors or suppliers.

5 Any other matters that do not clearly fall within these guidelines should be reviewed with NERC s General Counsel before being discussed. III. Activities That Are Permitted From time to time decisions or actions of NERC (including those of its committees and subgroups) may have a negative impact on particular entities and thus in that sense adversely impact competition. Decisions and actions by NERC (including its committees and subgroups) should only be undertaken for the purpose of promoting and maintaining the reliability and adequacy of the bulk power system. If you do not have a legitimate purpose consistent with this objective for discussing a matter, please refrain from discussing the matter during NERC meetings and in other NERC-related communications. You should also ensure that NERC procedures, including those set forth in NERC s Certificate of Incorporation, Bylaws, and Rules of Procedure are followed in conducting NERC business. In addition, all discussions in NERC meetings and other NERC-related communications should be within the scope of the mandate for or assignment to the particular NERC committee or subgroup, as well as within the scope of the published agenda for the meeting. No decisions should be made nor any actions taken in NERC activities for the purpose of giving an industry participant or group of participants a competitive advantage over other participants. In particular, decisions with respect to setting, revising, or assessing compliance with NERC reliability standards should not be influenced by anti-competitive motivations. Subject to the foregoing restrictions, participants in NERC activities may discuss: Reliability matters relating to the bulk power system, including operation and planning matters such as establishing or revising reliability standards, special operating procedures, operating transfer capabilities, and plans for new facilities. Matters relating to the impact of reliability standards for the bulk power system on electricity markets, and the impact of electricity market operations on the reliability of the bulk power system. Proposed filings or other communications with state or federal regulatory authorities or other governmental entities. Matters relating to the internal governance, management and operation of NERC, such as nominations for vacant committee positions, budgeting and assessments, and employment matters; and procedural matters such as planning and scheduling meetings. NERC Antitrust Compliance Guidelines 2

6 Agenda Item 2 CIPC Meeting December 14, 2012 CIPC Minutes Action Approve Background The Minutes from the September 2011 meeting are available at for your review.

7 Election of CIPC Executive Committee Members at Large Agenda Item 4 CIPC Meeting December 14, 2012 Action Election Background The CIPC charter requires that CIPC Executive Committee Member-at-Large elections be held in December of odd-numbered years. The CIPC Nominating Sub-committee will present its slate of candidates at the CIPC meeting. The relevant sections of the CIPC Charter follow: Section Members. Executive Committee a. The CIPC shall have an Executive Committee (EC) with the following membership. i. Chair ii. Two Vice-Chairs iii. Secretary (non-voting, NERC staff member) iv. Four Committee members elected by the Committee, who are subject-matter experts (SME) in one of the following areas: Physical Security, Cyber Security, Operations and Policy. (a) The SME members are selected at the December meeting in odd-numbered years, using the selection process defined in the Officers section above. (b) The terms of the SME member positions are for two years and shall begin on January 1 st following their election and continue through December 31 st of the second year following. Elections for Members-at-Large follow the same election process as CIPC Officers: Section 4. Officers 1. Officer Positions. a. The Committee shall have a Chair and two Vice-Chairs. 2. Terms. a. The terms of all officer positions are for two years and shall begin on January 1 st following their election and continue through December 31 st of the second year following. 3. Timing of Elections.

8 a. Elections for the Chair and Vice-Chairs shall take place at the September meeting in odd-numbered years. 4. Selection Process. a. The Committee selects officers using the following process: i. The nominating subcommittee will present its recommended candidate (or candidates if filling the Vice Chair positions). ii. The Secretary will open the floor for nominations. iii. After hearing no further nominations, or upon approval of a motion to close nominations, the Secretary will close the nominating process. iv. The Committee will then vote on the slate of candidates recommended by the nominating subcommittee. If the slate is approved by a 2/3 majority, the slate shall be deemed elected and the election shall close. v. If the slate fails, the Secretary will distribute paper ballots containing the names of all of the candidates, listed in the order in which they were nominated, on which the Committee members shall mark their preference(s). vi. The Secretary shall collect and tabulate the ballots. Any ballot containing more votes than the number of open positions shall be deemed invalid. Any candidate(s) to garner a 2/3 majority of the Committee s votes will be deemed elected. vii. If open positions remain at the conclusion of the balloting process, the Chair may, at his/her discretion, open the floor for additional nominations. The Secretary shall prepare new ballots listing the names of the remaining and any newly-nominated candidates in the order the nominations were made, and the balloting process shall be repeated until all positions have been filled. viii. The elected leadership will be submitted to the NERC Board of Trustees for approval.

9 Agenda Item 7 CIPC Meeting December 14, 2011 Critical Infrastructure Protection Metrics Action Discussion Background The measurement of resilience has become increasingly important in the critical infrastructure protection mission. While reliability addresses prevention of large scale outages, resilience is viewed as the ability to recover rapidly after a large scale outage. Resilience is also an element of the overall electric system design such as the capacity of a large interconnected grid to absorb shocks. The protection of critical infrastructure and the continuation of business operations are complementary elements of a comprehensive risk-management strategy. The characteristics by which resilience 1 is measured are 1) robustness, 2) resourcefulness and 3) rapid recovery. The NERC Planning and Operating Committees have promoted the development of performance metrics for North American bulk power system through the formation of the Reliability Metric Working Group (RMWG). This working group has now been elevated to the Performance Analysis Subcommittee (PAS) supporting the importance of the aims of this objective. The aim of the PAS is to provide a slate of metrics that can yield an overall assessment of the reliability of the bulk power system and to assess reliability within the context of the Adequate Level of Reliability (ALR)2 framework (currently under revision). By using the ALR characteristics as its foundational criteria, the NERC RMWG developed metrics to monitor, assess, and report on the reliability and adequacy of the bulk power system. These metrics provide insight and valuable information with respect to maintaining reliability of the bulk power system, and, in the future, to identifying trends that will inform risk management decisions. The relationship between the characteristics of resilience and selected ALR metrics are shown in Table 1. Table 1: Potential Information for Selected ALRs for Inclusion in a Resilience Index Robustness Resourcefulness Rapid Recovery ALR 1-3: Planning Reserve Margin (RM) Mitigation plans, such as automatic load-shedding schemes, transmission line relief (TLR) procedures, and controlled islanding plans Maturity of the Mutual Aid Agreement (MAA) program among utilities in the affected region

10 ALR 2-3: Activation of Under- Frequency Load Shedding (UFLS) ALR 2-5: Disturbance Control Events (DCS) Greater than Most Severe Single Contingency (MSSC) ALR 6-2: Energy Emergency Alert 3 (EEA3) Automatic generation control Smart devices for selfhealing Trained work force Historical record of service restoration rates/performance based on major disturbances that occurred in the past as a result either of hurricanes, earthquakes, tornadoes, or ice storms Level of spare parts inventory within the NERC region under consideration Effective Emergency Management Systems (EMS) NERC and its stakeholders should also have the ability to track trends and measure the improvement in compliance with critical infrastructure protection (CIP) standards. Each CIP violation is presently associated with a predefined risk factor and an assessed severity level. The following are two examples of proposed CIP metrics: (I) (II) One key metric is defined as a risk factor and severity level weighted average based on unmitigated violations. The weighting values are derived by applying ratios similar to those developed in the NERC Sanction Guidelines to assess the potential consequences of a particular unmitigated violation; Another metric is the average duration for mitigation plan completion. This measures the registered entities ability to mitigate violations in a timely manner. The duration is defined as the number of days between the date a mitigation plan is discovered by the regional entity and the reported mitigation plan closing date. The average duration in days is the sum of all durations divided by total number of violations discovered on a quarterly basis. A Critical Infrastructure Protection (CIP) Task Force is needed for defining metrics that measure progress towards reliability improvement. This task force will support the initiatives of the NERC Reliability Assessment and Performance Analysis Program and assess violation risk, severity results and repeat violations, normalized by enforcement stringency. The key objectives of the CIP Task Force will be to: 1. Further develop CIP metrics. 2. Tie the metrics with CIP Standards under revision. 3. Link these metrics to the ALR metrics shown in Table 1.

11 Agenda Item 09.a. CIPC Meeting December 14, 2012 Cyber Attack Task Force Report Action Discuss and approve. Background The Cyber Attack Task Force final report is in preparation, and will not be ready for final approval at the December meeting. It is anticipated that an vote will be conducted early in 2012 to approve the final report.

12 Agenda Item 10.b. CIPC Meeting December 14, 2012 Substation Guideline Task Force Action Discuss and approve. Background The Substation (Physical) Security guideline is in preparation, and will not be ready in time for the required two-week advance posting for approval at the December meeting. It is anticipated that an vote will be conducted early in 2012 to approve the final report.

13 Agenda Item 10.c. CIPC Meeting December 14, 2012 Action Discuss and approve. Protecting Sensitive Information Task Force Background The Protecting Sensitive Information guideline is in preparation, and will not be ready in time for the required two-week advance posting for approval at the December meeting. It is anticipated that an vote will be conducted early in 2012 to approve the final report.

Agenda Project Management and Oversight Subcommittee (PMOS) Meeting September 13, :00 to 5:00 p.m. Pacific

Agenda Project Management and Oversight Subcommittee (PMOS) Meeting September 13, 2016 1:00 to 5:00 p.m. Pacific Dial-in: 1-866-740-2560 Access Code: 1326651 Security/Passcode: 091316 Click here for: Webinar