ipcgrid 2015 March 26, 2015 David Roop Director Electric Transmission Operations Dominion Virginia Power

Size: px
Start display at page:

Download "ipcgrid 2015 March 26, 2015 David Roop Director Electric Transmission Operations Dominion Virginia Power"

Transcription

1 Substation Security and Resiliency Update on Accomplishments thus far ipcgrid 2015 March 26, 2015 David Roop Director Electric Transmission Operations Dominion Virginia Power

2 Dominion Profile Leading provider of energy and energy services in the Northeast and Mid Atlantic regions of the U.S. ~24,600 MW of electric generation 6,455+ miles of electric transmission 12,400 miles of natural gas transmission, gathering and storage pipeline 949billion cubic feet of natural gas storage operated Cove Point LNG Facility 2.4 million electric customers in VA and NC 1.3 million natural gas customers in OH & WV 2.1 million non-regulated retail customers in 13 states

3 Our Integrated Business Model Dominion Virginia Power Electric Distribution Electric Transmission Unregulated Retail Dominion Generation Regulated Generation Merchant Generation Dominion Energy Gas Transmission Gas Distribution Producer Services

4 Four NERC Interconnections 4

5 Dominion Electric Transmission System Over 6,400 miles of transmission line 5

6 Threats Have Fundamentally Changed February

7 New Resiliency Strategy Future Operating Conditions 7

8 Risk Assessment Substation Security System Operations Center Cyber Security 8

9 Initial Steps Taken Gap Analysis of Existing Processes to understand areas for improvement Cross functional team with Security and IT organizations within Dominion Initiated interaction with outside entities to insure rigor Models are key to understanding risk Recommendations Plan for all threats to reliability Plan for recovery Plan for improved situational awareness 9

10 Team Recommendations Potential Threats Plan for all threats to reliability Natural Hurricanes, Tornadoes, Earthquake, Derecho events Geomagnetic Disturbances Man made Electromagnetic Terrorism (Physical / Cyber) Copper theft 10

11 Team Recommendations Improving preparedness Plan for recovery Emergency Equipment Sufficient spares Strategically Staged & Protected Mobile Equipment Mobile Gas Insulated Switchgear for Transmission Transmission Mobile Transformers Plan for situational awareness Synchrophasor deployment Linear State Estimation Security Control Center enhancements 11

12 Risk Assessment Modeling 12

13 Introduction Pre CIP 014 Objective: Identify critical substations. Determined from three metrics: Load flow violations Generator response Bus voltage angle Relative ranking. CIP 014 Objective: instability, uncontrolled separation, or cascading. Cascading algorithm. Physical Attack Ranking Stable Collapse NO Cascade Cascade Bounded Collapse 13

14 Methodology Implementation Available software does NOT contemplate: Instability. Uncontrolled separation. Cascading. Custom Python algorithm Core components: Hard Solution. Corrective Actions. Trip Likelihood. Cascading Algorithm. Corrective Actions Trip Likelihood Cascading Algorithm Hard Solution Voltage Indices Dynamic Simulation Contingency File Parallel Processing Protection Schemes 14

15 A Flexible Methodology All four core components designed to be tunable: Hard Solutions (Size and scope of soln. steps) Corrective Actions (Feasibility Limits) Cascading Probabilities (0% 100% tripping curve limits) Cascading Paths (Thresholds, metrics, path rules) Method designed with GUI to allow quick tuning and running This methodology does not describe a one size fits all approach Various factors are a matter of engineering judgment, risk tolerance, system operation tactics, regulations, and other enterprise policies 15

16 Dominion s Plan More than CIP 014 Physical Security Plan CIP 014 R1 CIP 014 Not R1 CIP Only Not CIP 014 Not CIP 002 Instability, Uncontrolled Separation, or Cascading Applicable in the study process. However, does not cascade. For example: Black Start stations. For example: critical loads. Likelihood(C) > Threshold Likelihood(C) < Threshold 16

17 Models Industry Challenges and Opportunities Opportunities Identifies significant stress features of network previously unidentified with N 1 analysis Helps Transmission Owners to prioritize and develop contingency plans for hardening network for major events Weather Terrorism Others? Challenges How to initiate capital funding mechanisms to address significant deficiencies / risk if outside normal planning guidance without exposing risk to individuals that want to do harm to the electrical system 17

18 Substation Physical Security 18

19 Electric Transmission Critical Substation Security Physical Dominion security has identified upgrades: potentially vulnerable sites Enhanced perimeter security Critical equipment protection Improved off site monitoring Total Capex Spend of ~$450 million Please refer to page 3 for risks and uncertainties related to projections and forward looking statements. 2/9/ Investor and Analyst Meeting 19

20 Facilities with Enhanced Security Perimeter Barriers o Anti cut o Anti climb o Anti ram Ballistic Protection Access Control Lighting Increased electronic surveillance o Shot Detection o Fence Sensors o High Definition Cameras o Thermal Imaging o Video Analytics 20

21 Key Facts Project Implementation / Execution Over 4,300 foundations installed in the past 5 months 20,150 ft of Anti climb high security fence 8,915 ft of Anti ram fence By the end of 2015 Total of 15 miles of fence New 230kV GIS mobile breaker added to fleet New 115kV GIS mobile breaker added to fleet 3 new protected regional storage facilities for emergency materials 21

22 Physical Security Countermeasures taking shape 22

23 System Operations Center 23

24 SOC Project Considerations Building construction in progress Design and performance requirements Simplicity and flexibility Standards: Uptime Tier Levels, TIA 942, LEED, physical and cyber security, EMP Considerations 2017 Project completion 24

25 Dominion s Resiliency Strategy 25

26 Questions? 26

Transmission, Risk and EPA Air Regulations

Transmission, Risk and EPA Air Regulations Transmission, Risk and EPA Air Regulations Bob Bradish, AEP NCSL/NARUC Transmission Policy Institute May 28, 2015 AEP Overview Headquartered in Columbus, Ohio, AEP is one of the largest electric utilities

More information

Carl Herron, Senior Manager Physical Security Analyst NPCC Fall Workshop November 8, 2017 Hartford Connecticut

Carl Herron, Senior Manager Physical Security Analyst NPCC Fall Workshop November 8, 2017 Hartford Connecticut Physical Security Analysis of Substations Carl Herron, Senior Manager Physical Security Analyst NPCC Fall Workshop November 8, 2017 Hartford Connecticut NPCC Fall Workshop Substation Review Vulnerabilities

More information

Chapter X Security Performance Metrics

Chapter X Security Performance Metrics DRAFT February 19, 15 BES Security s Working Group Page 1 of 7 Chapter X Security Performance s 1 3 3 3 3 0 Background The State of Reliability 1 report noted that the NERC PAS was collaborating with the

More information

CIP-014. JEA Compliance Approach. FRCC Fall Compliance Workshop Presenter Daniel Mishra

CIP-014. JEA Compliance Approach. FRCC Fall Compliance Workshop Presenter Daniel Mishra CIP-014 JEA Compliance Approach FRCC Fall Compliance Workshop Presenter Daniel Mishra Acronyms & Terminologies DHS Department of Homeland Security JEA It s not an acronym JSO Jacksonville Sheriff's Office

More information

Critical Infrastructure Protection Version 5

Critical Infrastructure Protection Version 5 Critical Infrastructure Protection Version 5 Tobias Whitney, Senior CIP Manager, Grid Assurance, NERC Compliance Committee Open Meeting August 9, 2017 Agenda Critical Infrastructure Protection (CIP) Standards

More information

Texas Reliability Entity, Inc. Strategic Plan for 2017 TEXAS RE STRATEGIC PLAN FOR 2017 PAGE 1 OF 13

Texas Reliability Entity, Inc. Strategic Plan for 2017 TEXAS RE STRATEGIC PLAN FOR 2017 PAGE 1 OF 13 Texas Reliability Entity, Inc. Strategic Plan for 2017 TEXAS RE STRATEGIC PLAN FOR 2017 PAGE 1 OF 13 I. Vision A highly reliable and secure bulk power system in the Electric Reliability Council of Texas

More information

T&D Challenges and Opportunities

T&D Challenges and Opportunities T&D Challenges and Opportunities Mark McGranaghan Vice President, Power Delivery and Utilization Alberta Power Industry Consortium November 5, 2014 Tomorrow s Power System (vision) The Integrated Grid

More information

Live Webinar: Best Practices in Substation Security November 17, 2014

Live Webinar: Best Practices in Substation Security November 17, 2014 Live Webinar: Best Practices in Substation Security November 17, 2014 1 Agenda & Panelists Welcome & Introduction - Allan Wick, CFE, CPP, PSP, PCI, CBCP Enterprise Security Manager-CSO Tri-State Generation

More information

Toward All-Hazards Security and Resilience for the Power Grid

Toward All-Hazards Security and Resilience for the Power Grid Toward All-Hazards Security and Resilience for the Power Grid Juan Torres Associate Laboratory Director, Energy Systems Integration National Renewable Energy Laboratory December 6, 2017 1 Grid Modernization

More information

Physical Security Reliability Standard Implementation

Physical Security Reliability Standard Implementation Physical Security Reliability Standard Implementation Attachment 4b Action Information Background On March 7, 2014, the Commission issued an order directing NERC to submit for approval, within 90 days,

More information

How AlienVault ICS SIEM Supports Compliance with CFATS

How AlienVault ICS SIEM Supports Compliance with CFATS How AlienVault ICS SIEM Supports Compliance with CFATS (Chemical Facility Anti-Terrorism Standards) The U.S. Department of Homeland Security has released an interim rule that imposes comprehensive federal

More information

Regulatory Impacts on Research Topics. Jennifer T. Sterling Director, Exelon NERC Compliance Program

Regulatory Impacts on Research Topics. Jennifer T. Sterling Director, Exelon NERC Compliance Program Regulatory Impacts on Research Topics Jennifer T. Sterling Director, Exelon NERC Compliance Program The 2003 Blackout On August 14, 2003, an electric power blackout affected large portions of the Northeast

More information

Critical Asset Identification Methodology. William E. McEvoy Northeast Utilities

Critical Asset Identification Methodology. William E. McEvoy Northeast Utilities Critical Asset Identification Methodology William E. McEvoy Northeast Utilities Disclaimer This NPCC TFIST workshop provides a forum for the presentation and discussion of member experience in the implementation

More information

Utility Brand Studio THE STATE OF PHYSICAL GRID

Utility Brand Studio THE STATE OF PHYSICAL GRID Utility Brand Studio THE STATE OF PHYSICAL GRID 2015 DEMOGRAPHICS Every utility is different, so we asked those surveyed to provide information about the type of utility they work for, the grid operations

More information

Safe, Resilient, Customer Focused Infrastructure

Safe, Resilient, Customer Focused Infrastructure Safe, Resilient, Customer Focused Infrastructure Society of Utility and Regulatory Financial Analysts Forum Panel 4 Brett Crable, Director New Technology & Energy Conservation Dominion Energy Profile Power

More information

LADWP Critical Infrastructure Protection

LADWP Critical Infrastructure Protection d ---- w. ^ - ** : _ mwm FEB 0 2 2016 B... gi r.* *«r 3br»t*> it-i > \ S fr-% LU Threat and Vulnerability Assessments Water and Power Facilities / * LADWP Critical Infrastructure Protection Control

More information

Scope Cyber Attack Task Force (CATF)

Scope Cyber Attack Task Force (CATF) Scope Cyber Attack Task Force (CATF) PART A: Required for Committee Approval Purpose This document defines the scope, objectives, organization, deliverables, and overall approach for the Cyber Attack Task

More information

An Update on Security and Emergency Preparedness Standards for Utilities

An Update on Security and Emergency Preparedness Standards for Utilities An Update on Security and Emergency Preparedness Standards for Utilities Linda P. Warren, Launch! Consulting Safety and Security in the Workplace March 28, 2013 Overview 1 Review of AWWA Standards in Water

More information

151 FERC 61,066 UNITED STATES OF AMERICA FEDERAL ENERGY REGULATORY COMMISSION ORDER DENYING REHEARING. (Issued April 23, 2015)

151 FERC 61,066 UNITED STATES OF AMERICA FEDERAL ENERGY REGULATORY COMMISSION ORDER DENYING REHEARING. (Issued April 23, 2015) 151 FERC 61,066 UNITED STATES OF AMERICA FEDERAL ENERGY REGULATORY COMMISSION Before Commissioners: Norman C. Bay, Chairman; Philip D. Moeller, Cheryl A. LaFleur, Tony Clark, and Colette D. Honorable.

More information

Risk-Based Approach to Compliance Monitoring and Enforcement

Risk-Based Approach to Compliance Monitoring and Enforcement Risk-Based Compliance Oversight Plan Process for Risk Elements and Associated The ERO Enterprise continues to identify risks to the reliability of the BPS, as well as mitigating factors that may reduce

More information

Dmitry Ishchenko/Reynaldo Nuqui/Steve Kunsman, September 21, 2016 Collaborative Defense of Transmission and Distribution Protection & Control Devices

Dmitry Ishchenko/Reynaldo Nuqui/Steve Kunsman, September 21, 2016 Collaborative Defense of Transmission and Distribution Protection & Control Devices Dmitry Ishchenko/Reynaldo Nuqui/Steve Kunsman, September 21, 2016 Collaborative Defense of Transmission and Distribution Protection & Control Devices Against Cyber Attacks (CODEF) Cyber Security of the

More information

CIP Version 5 Transition. Steven Noess, Director of Compliance Assurance Member Representatives Committee Meeting November 12, 2014

CIP Version 5 Transition. Steven Noess, Director of Compliance Assurance Member Representatives Committee Meeting November 12, 2014 CIP Version 5 Transition Steven Noess, Director of Compliance Assurance Member Representatives Committee Meeting November 12, 2014 Purpose of the Transition Program Transitioning entities confident in

More information

Transmission Resiliency & Security

Transmission Resiliency & Security Transmission Resiliency & Security Response to High Impact Low Frequency Threats Richard Lordan, PE Senior Technical Executive NCSL-NARUC Energy Risk & Critical Infrastructure Protection Workshop May 25,

More information

2015 Risk Element: Extreme Physical Events

2015 Risk Element: Extreme Physical Events 2015 Risk Element: Extreme Physical Events Industry Webinar October 15, 2015 Administrative Items NERC Antitrust Guidelines It is NERC s policy and practice to obey the antitrust laws fully and to avoid

More information

SDG&E s Accomplishments and Future Plans

SDG&E s Accomplishments and Future Plans SDG&E s Accomplishments and Future Plans Tariq Raman and Subbu Sankaran San Diego Gas & Electric Work Group Meeting October 23-24, 2018 San Diego Gas & Electric San Francisco SDG&E Los Angeles San Diego

More information

CIP Cyber Security Systems Security Management

CIP Cyber Security Systems Security Management A. Introduction 1. Title: Cyber Security System Security Management 2. Number: CIP-007-5 3. Purpose: To manage system security by specifying select technical, operational, and procedural requirements in

More information

Project Physical Security Directives Mapping Document

Project Physical Security Directives Mapping Document Document Background In Order No. 802 (final order on CIP-014-1 Physical Security), issued on November 20, 2014, FERC directed NERC to remove the term widespread from Reliability Standard CIP-014-1 or,

More information

Grid Security & NERC

Grid Security & NERC Grid Security & NERC Janet Sena, Senior Vice President, Policy and External Affairs Southern States Energy Board 2017 Associate Members Winter Meeting February 27, 2017 Recent NERC History Energy Policy

More information

NERC Overview and Compliance Update

NERC Overview and Compliance Update NERC Overview and Compliance Update Eric Ruskamp Manager, Regulatory Compliance August 17, 2018 1 Agenda NERC Overview History Regulatory Hierarchy Reliability Standards Compliance Enforcement Compliance

More information

EEI Fall 2008 Legal Conference Boston, Massachusetts Stephen M. Spina November 1,

EEI Fall 2008 Legal Conference Boston, Massachusetts Stephen M. Spina November 1, EEI Fall 2008 Legal Conference Boston, Massachusetts Stephen M. Spina November 1, 2008 www.morganlewis.com Overview Reliability Standards Enforcement Framework Critical Infrastructure Protection (CIP)

More information

June 4, 2014 VIA ELECTRONIC FILING. Veronique Dubois Régie de l'énergie Tour de la Bourse 800, Place Victoria Bureau 255 Montréal, Québec H4Z 1A2

June 4, 2014 VIA ELECTRONIC FILING. Veronique Dubois Régie de l'énergie Tour de la Bourse 800, Place Victoria Bureau 255 Montréal, Québec H4Z 1A2 June 4, 2014 VIA ELECTRONIC FILING Veronique Dubois Régie de l'énergie Tour de la Bourse 800, Place Victoria Bureau 255 Montréal, Québec H4Z 1A2 Re: North American Electric Reliability Corporation Dear

More information

Grid Operations - Program 39

Grid Operations - Program 39 Grid Operations - Program 39 Program Description Program Overview In many ways, today's power system must be operated to meet objectives for which it was not explicitly designed. Today's transmission system

More information

CIP Cyber Security Configuration Change Management and Vulnerability Assessments

CIP Cyber Security Configuration Change Management and Vulnerability Assessments Standard Development Timeline This section is maintained by the drafting team during the development of the standard and will be removed when the standard becomes effective. Development Steps Completed

More information

PIPELINE SECURITY An Overview of TSA Programs

PIPELINE SECURITY An Overview of TSA Programs PIPELINE SECURITY An Overview of TSA Programs Jack Fox Pipeline Industry Engagement Manager Surface Division Office of Security Policy & Industry Engagement May 5, 2014 TSA and Pipeline Security As the

More information

BCM s Role in Effective Risk Management: A Risk Manager s Point of View

BCM s Role in Effective Risk Management: A Risk Manager s Point of View BCM s Role in Effective Risk Management: A Risk Manager s Point of View Date: March 24, 2015 Presenter: Randall Davis, MBA, IBD, CPCU, ERM, ARM, ARM E, ABCP Agenda for this session Explore the case for

More information

Industry Best Practices for Securing Critical Infrastructure

Industry Best Practices for Securing Critical Infrastructure Industry Best Practices for Securing Critical Infrastructure Cyber Security and Critical Infrastructure AGENDA - Difference between IT and OT - Real World Examples of Cyber Attacks Across the IT/OT Boundary

More information

CIP Cyber Security Configuration Change Management and Vulnerability Assessments

CIP Cyber Security Configuration Change Management and Vulnerability Assessments CIP-010-2 Cyber Security Configuration Change Management and Vulnerability Assessments A. Introduction 1. Title: Cyber Security Configuration Change Management and Vulnerability Assessments 2. Number:

More information

Business continuity management and cyber resiliency

Business continuity management and cyber resiliency Baker Tilly refers to Baker Tilly Virchow Krause, LLP, an independently owned and managed member of Baker Tilly International. Business continuity management and cyber resiliency Introductions Eric Wunderlich,

More information

Disclaimer Executive Summary Introduction Overall Application of Attachment Generation Transmission...

Disclaimer Executive Summary Introduction Overall Application of Attachment Generation Transmission... CIP-002-4 Cyber Security Critical Cyber Asset Identification Rationale and Implementation Reference Document September, 2010 Table of Contents TABLE OF CONTENts Disclaimer... 3 Executive Summary... 4 Introduction...

More information

Grid Modernization at the Department of Energy

Grid Modernization at the Department of Energy Grid Modernization at the Department of Energy Kevin Lynn, Director of the Grid Integration Initiative Office of Energy Efficiency and Renewable Energy November 17, 2014 Electricity Plays a Vital Role

More information

EPRI Research Overview IT/Security Focus. Power Delivery & Energy Utilization Sector From Generator Bus Bar to End Use

EPRI Research Overview IT/Security Focus. Power Delivery & Energy Utilization Sector From Generator Bus Bar to End Use EPRI Research Overview IT/Security Focus November 29, 2012 Mark McGranaghan VP, Power Delivery and Utilization Power Delivery & Energy Utilization Sector From Generator Bus Bar to End Use Transmission

More information

UNITED STATES OF AMERICA FEDERAL ENERGY REGULATORY COMMISSION COMMENTS OF THE PENNSYLVANIA PUBLIC UTILITY COMMISSION

UNITED STATES OF AMERICA FEDERAL ENERGY REGULATORY COMMISSION COMMENTS OF THE PENNSYLVANIA PUBLIC UTILITY COMMISSION UNITED STATES OF AMERICA FEDERAL ENERGY REGULATORY COMMISSION Physical Security Reliability : Standard : Docket No. RD14-15-000 COMMENTS OF THE PENNSYLVANIA PUBLIC UTILITY COMMISSION I. INTRODUCTION On

More information

FERC Reliability Technical Conference -- Panel I State of Reliability and Emerging Issues

FERC Reliability Technical Conference -- Panel I State of Reliability and Emerging Issues -- State of Reliability and Emerging Issues Remarks of Thomas Burgess, Vice President and Director, Reliability Assessment and Performance Analysis Chairman Wellinghoff, Commissioners, Staff, and fellow

More information

Call for Papers GCC POWER 2011 GCC Cigre s Leading Electric Power Conference & Exhibition In the Gulf Region

Call for Papers GCC POWER 2011 GCC Cigre s Leading Electric Power Conference & Exhibition In the Gulf Region Call for Papers GCC POWER 2011 GCC Cigre s Leading Electric Power Conference & Exhibition In the Gulf Region Kuwait - November 2011 GCC Cigre, is pleased to announce its 7 th International Conference GCC

More information

Standards Authorization Request Form

Standards Authorization Request Form Standards Authorization Request Form When completed, email this form to: sarcomm@nerc.com NERC welcomes suggestions to improve the reliability of the bulk power system through improved reliability standards.

More information

CIP Cyber Security Configuration Change Management and Vulnerability Assessments

CIP Cyber Security Configuration Change Management and Vulnerability Assessments CIP-010-2 3 Cyber Security Configuration Change Management and Vulnerability Assessments A. Introduction 1. Title: Cyber Security Configuration Change Management and Vulnerability Assessments 2. Number:

More information

Standard CIP Cyber Security Critical Cyber As s et Identification

Standard CIP Cyber Security Critical Cyber As s et Identification A. Introduction 1. Title: Cyber Security Critical Cyber Asset Identification 2. Number: CIP-002-4 3. Purpose: NERC Standards CIP-002-4 through CIP-009-4 provide a cyber security framework for the identification

More information

2018 General Rate Case

2018 General Rate Case Application No.: A.1-0- Exhibit No.: SCE-0, Vol. 0 Witnesses: M. Flores B. Tolentino A (U -E) 01 General Rate Case ERRATA Transmission & Distribution (T&D) Volume 0 Substation Construction & Maintenance

More information

Advanced IT Risk, Security management and Cybercrime Prevention

Advanced IT Risk, Security management and Cybercrime Prevention Advanced IT Risk, Security management and Cybercrime Prevention Course Goal and Objectives Information technology has created a new category of criminality, as cybercrime offers hackers and other tech-savvy

More information

VA3 245,000 SQ. FT. 16MW AVAILABLE NOW 2MW AND 4MW CUSTOMIZABLE DEDICATED VAULTS RAGINGWIRE ASHBURN, VA MASSIVE 78 ACRE CAMPUS

VA3 245,000 SQ. FT. 16MW AVAILABLE NOW 2MW AND 4MW CUSTOMIZABLE DEDICATED VAULTS RAGINGWIRE ASHBURN, VA MASSIVE 78 ACRE CAMPUS 245,000 SQ. FT. 16MW AVAILABLE NOW MASSIVE 78 ACRE CAMPUS 7 INTERCONNECTED BUILDINGS PLANNED AND 4MW CUSTOMIZABLE DEDICATED VAULTS 866-599-0998 info@ragingwire.com www.ragingwire.com MASSIVE WHOLESALE

More information

Standard Development Timeline

Standard Development Timeline Standard Development Timeline This section is maintained by the drafting team during the development of the standard and will be removed when the standard becomes effective. Description of Current Draft

More information

Risk: Security s New Compliance. Torsten George VP Worldwide Marketing and Products, Agiliance Professional Strategies - S23

Risk: Security s New Compliance. Torsten George VP Worldwide Marketing and Products, Agiliance Professional Strategies - S23 Risk: Security s New Compliance Torsten George VP Worldwide Marketing and Products, Agiliance Professional Strategies - S23 Agenda Market Dynamics Organizational Challenges Risk: Security s New Compliance

More information

Security Monitoring Engineer / (NY or NC) Director, Information Security. New York, NY or Winston-Salem, NC. Location:

Security Monitoring Engineer / (NY or NC) Director, Information Security. New York, NY or Winston-Salem, NC. Location: Position: Reports to: Location: Security Monitoring Engineer / (NY or NC) Director, Information Security New York, NY or Winston-Salem, NC Position Summary: The Clearing House (TCH) Information Security

More information

Reliability Standard Audit Worksheet 1

Reliability Standard Audit Worksheet 1 Reliability Standard Audit Worksheet 1 CIP-002-5.1 Cyber Security BES Cyber System Categorization This section to be completed by the Compliance Enforcement Authority. Audit ID: Registered Entity: NCR

More information

Methods for Establishing IROLs Task Force

Methods for Establishing IROLs Task Force Methods for Establishing IROLs Task Force Progress Update Ryan D. Quint Senior Manager, Advanced Analytics and Modeling OC/PC Joint Meeting March 7, 2017 Background MEITF kicked off in December to: Address

More information

Standard Development Timeline

Standard Development Timeline Standard Development Timeline This section is maintained by the drafting team during the development of the standard and will be removed when the standard is adopted by the NERC Board of Trustees (Board).

More information

Geomagnetic Disturbances

Geomagnetic Disturbances Geomagnetic Disturbances Managing Risk to the North American Power Grid Mark Olson, Reliability Standards Developer Worcester Polytechnic Institute Energy Symposium September 25, 2013 About NERC The North

More information

Don t Fail to Prepare for Failure Key Issues in Energy Assurance and Cybersecurity and Related NGA Center Activities

Don t Fail to Prepare for Failure Key Issues in Energy Assurance and Cybersecurity and Related NGA Center Activities Don t Fail to Prepare for Failure Key Issues in Energy Assurance and Cybersecurity and Related NGA Center Activities Governors Energy Advisors Policy Institute June 24, 2016 Washington, DC Topics Threats

More information

Standard CIP Cyber Security Systems Security Management

Standard CIP Cyber Security Systems Security Management A. Introduction 1. Title: Cyber Security Systems Security Management 2. Number: CIP-007-1 3. Purpose: Standard CIP-007 requires Responsible Entities to define methods, processes, and procedures for securing

More information

The Office of Infrastructure Protection

The Office of Infrastructure Protection The Office of Infrastructure Protection National Protection and Programs Directorate Department of Homeland Security Protective Security Advisors and Special Event Domestic Incident Tracker Overview Federal

More information

Additional 45-Day Comment Period and Ballot November Final Ballot is Conducted January Board of Trustees (Board) Adoption February 2015

Additional 45-Day Comment Period and Ballot November Final Ballot is Conducted January Board of Trustees (Board) Adoption February 2015 Standard Development Timeline This section is maintained by the drafting team during the development of the standard and will be removed when the standard becomes effective. Development Steps Completed

More information

CIP Cyber Security Security Management Controls. A. Introduction

CIP Cyber Security Security Management Controls. A. Introduction CIP-003-7 - Cyber Security Security Management Controls A. Introduction 1. Title: Cyber Security Security Management Controls 2. Number: CIP-003-7 3. Purpose: To specify consistent and sustainable security

More information

Failure Diagnosis and Cyber Intrusion Detection in Transmission Protection System Assets Using Synchrophasor Data

Failure Diagnosis and Cyber Intrusion Detection in Transmission Protection System Assets Using Synchrophasor Data Failure Diagnosis and Cyber Intrusion Detection in Transmission Protection System Assets Using Synchrophasor Data Anurag Srivastava, Bo Cui, P. Banerjee Washington State University NASPI March 2017 Outline

More information

Québec Reliability Standards Compliance Monitoring and Enforcement Program Implementation Plan Annual Implementation Plan

Québec Reliability Standards Compliance Monitoring and Enforcement Program Implementation Plan Annual Implementation Plan Québec Reliability Standards Compliance Monitoring and Enforcement Program Implementation Plan 2017 Annual Implementation Plan Effective Date: January 1, 2017 Approved by the Régie: December 1, 2016 Table

More information

Integrating Distributed Resources into Distribution Planning and Operations R&D Priorities

Integrating Distributed Resources into Distribution Planning and Operations R&D Priorities Integrating Distributed Resources into Distribution Planning and Operations R&D Priorities Mark McGranaghan Jason Taylor Electric Power Research Institute CIRED Workshop 2016 Helsinki Theme 2: Resilient

More information

NERC Event Analysis Update Webinar. Hassan Hamdar Chair, Event Analysis Subcommittee October 20, 2016

NERC Event Analysis Update Webinar. Hassan Hamdar Chair, Event Analysis Subcommittee October 20, 2016 NERC Event Analysis Update Webinar Hassan Hamdar Chair, Event Analysis Subcommittee October 20, 2016 Webinar Agenda ERO Event Analysis Process Update Lesson Learned Presentation from Entity ERO Lessons

More information

Exercise of FERC Authority for Cybersecurity of the North American Electric Grid

Exercise of FERC Authority for Cybersecurity of the North American Electric Grid Exercise of FERC Authority for Cybersecurity of the North American Electric Grid Thomas S. Popik Joseph M. Weiss George R. Cotter FERC Docket RM15-14-000 www.resilientsocieties.org Agenda Overall Concerns

More information

Standard CIP Cyber Security Critical Cyber As s et Identification

Standard CIP Cyber Security Critical Cyber As s et Identification A. Introduction 1. Title: Cyber Security Critical Cyber Asset Identification 2. Number: CIP-002-4 3. Purpose: NERC Standards CIP-002-4 through CIP-009-4 provide a cyber security framework for the identification

More information

Critical Infrastructure

Critical Infrastructure Critical Infrastructure 1 Critical Infrastructure Can be defined as any facility, system, or function which provides the foundation for national security, governance, economic vitality, reputation, and

More information

CIP Cyber Security Physical Security of BES Cyber Systems

CIP Cyber Security Physical Security of BES Cyber Systems A. Introduction 1. Title: Cyber Security Physical Security of BES Cyber Systems 2. Number: CIP-006-5 3. Purpose: To manage physical access to BES Cyber Systems by specifying a physical security plan in

More information

Cyber Resilience. Think18. Felicity March IBM Corporation

Cyber Resilience. Think18. Felicity March IBM Corporation Cyber Resilience Think18 Felicity March 1 2018 IBM Corporation Cyber Resilience Cyber Resilience is the ability of an organisation to maintain its core purpose and integrity during and after a cyber attack

More information

CIP Cyber Security Recovery Plans for BES Cyber Systems

CIP Cyber Security Recovery Plans for BES Cyber Systems A. Introduction 1. Title: Cyber Security Recovery Plans for BES Cyber Systems 2. Number: CIP-009-6 3. Purpose: To recover reliability functions performed by BES Cyber Systems by specifying recovery plan

More information

Comments by the Northeast Power Coordinating Council FERC Reactive Power Technical Conference

Comments by the Northeast Power Coordinating Council FERC Reactive Power Technical Conference Introduction The Northeast Power Coordinating Council 1 (NPCC) is an international electric regional reliability council formed shortly after the 1965 Northeast Blackout to promote the reliability and

More information

Cyber Threats? How to Stop?

Cyber Threats? How to Stop? Cyber Threats? How to Stop? North American Grid Security Standards Jessica Bian, Director of Performance Analysis North American Electric Reliability Corporation AORC CIGRE Technical Meeting, September

More information

Securing the Smart Grid. Understanding the BIG Picture 11/1/2011. Proprietary Information of Corporate Risk Solutions, Inc. 1.

Securing the Smart Grid. Understanding the BIG Picture 11/1/2011. Proprietary Information of Corporate Risk Solutions, Inc. 1. Securing the Smart Grid Understanding the BIG Picture The Power Grid The electric power system is the most capital-intensive infrastructure in North America. The system is undergoing tremendous change

More information

Presented by Joe Burns Kentucky Rural Water Association July 19, 2005

Presented by Joe Burns Kentucky Rural Water Association July 19, 2005 Infrastructure Security for Public Water and Wastewater Utilities Presented by Joe Burns Kentucky Rural Water Association July 19, 2005 Public Health Security and Bioterrorism Preparedness and Response

More information

Physical Grid Vulnerabilities

Physical Grid Vulnerabilities Physical Grid Vulnerabilities NRC Workshop on the Resiliency of the Electric Power Delivery System in Response to Terrorism and National Disasters February 27, 2013 Dr. John G. Kassakian The Massachusetts

More information

OPUC Workshop March 13, 2015 Cyber Security Electric Utilities. Portland General Electric Co. Travis Anderson Scott Smith

OPUC Workshop March 13, 2015 Cyber Security Electric Utilities. Portland General Electric Co. Travis Anderson Scott Smith OPUC Workshop March 13, 2015 Cyber Security Electric Utilities Portland General Electric Co. Travis Anderson Scott Smith 1 CIP Version 5 PGE Implementation Understanding the Regulations PGE Attended WECC

More information

Geomagnetic Disturbances and High-Altitude Electromagnetic Pulse Research

Geomagnetic Disturbances and High-Altitude Electromagnetic Pulse Research Geomagnetic Disturbances and High-Altitude Electromagnetic Pulse Research Bob Arritt, Technical Executive Grid Operations and Planning, Electric Power Research Institute Grid Security Conference (GridSecCon)

More information

Standard Development Timeline

Standard Development Timeline Standard Development Timeline This section is maintained by the drafting team during the development of the standard and will be removed when the standard is adopted by the NERC Board of Trustees (Board).

More information

Introduction to Business continuity Planning

Introduction to Business continuity Planning Week - 06 Introduction to Business continuity Planning 1 Introduction The purpose of this lecture is to give an overview of what is Business Continuity Planning and provide some guidance and resources

More information

CIP Physical Security What to Expect

CIP Physical Security What to Expect CIP-014-2 Physical Security What to Expect March 28, 2017 Kevin Perry Director, Critical Infrastructure Protection Jeff Rooker Lead Compliance Engineer 1 Purpose To identify and protect Transmission stations

More information

Security Management Seminar

Security Management Seminar SSID PSAV_Event_Solutions Passcode NERC0001 Security Management Seminar Ross Johnson, CPP Capital Power Edmonton, Alberta Security Management Programs Agenda Security Risk Management Design Basis Threat

More information

CIP Cyber Security Personnel & Training

CIP Cyber Security Personnel & Training A. Introduction 1. Title: Cyber Security Personnel & Training 2. Number: CIP-004-5.1 3. Purpose: To minimize the risk against compromise that could lead to misoperation or instability in the BES from individuals

More information

Blackout 2003 Reliability Recommendations

Blackout 2003 Reliability Recommendations Blackout 2003 Reliability Recommendations 2005 NPCC General Meeting The Cranwell Resort Lenox, MA September 29, 2005 Philip A. Fedora Director, Market Reliability Interface Northeast Power Coordinating

More information

CIP Cyber Security Configuration Change Management and Vulnerability Assessments

CIP Cyber Security Configuration Change Management and Vulnerability Assessments CIP 010 1 Cyber Security Configuration Change Management and Vulnerability Assessments A. Introduction 1. Title: Cyber Security Configuration Change Management and Vulnerability Assessments 2. Number:

More information

NIBS Building Innovation 2014

NIBS Building Innovation 2014 NIBS Building Innovation 2014 Integrated Rapid Visual Screening Process to Assess and Design Safe Schools Mila Kennett Department of Homeland Security Science and Technology Resilient Systems Division

More information

ERO Enterprise IT Projects Update

ERO Enterprise IT Projects Update ERO Enterprise IT Projects Update Stan Hoptroff, Vice President, Chief Technology Officer and Director of Information Technology Technology and Security Committee Meeting November 6, 2018 Agenda ERO IT

More information

Recent Issues in Electric Grid Physical Security

Recent Issues in Electric Grid Physical Security Recent Issues in Electric Grid Physical Security Paul W. Parfomak, Ph.D. Congressional Research Service pparfomak@crs.loc.gov Carnegie Mellon University Electricity Industry Center October 8, 2014 What

More information

Board of Trustees Compliance Committee

Board of Trustees Compliance Committee Board of Trustees Compliance Committee August 13, 2014 10:00 a.m. 11:00 a.m. Pacific The Westin Bayshore 1601 Bayshore Drive Vancouver, BC V6G 2V4 Reliability Assurance Initiative (RAI) Progress Report

More information

Standard CIP Cyber Security Critical Cyber Asset Identification

Standard CIP Cyber Security Critical Cyber Asset Identification Standard CIP 002 1 Cyber Security Critical Cyber Asset Identification Standard Development Roadmap This section is maintained by the drafting team during the development of the standard and will be removed

More information

requirements in a NERC or Regional Reliability Standard.

requirements in a NERC or Regional Reliability Standard. CIP 002 5.1 Cyber Security BES Cyber System Categorization A. Introduction 1. Title: Cyber Security BES Cyber System Categorization 2. Number: CIP 002 5.1 3. Purpose: To identify and categorize BES Cyber

More information

Hugo E. Meier, Heidelberg, Germany, June 2014 Integrator Partner Seminar2014 Substation automation trends

Hugo E. Meier, Heidelberg, Germany, June 2014 Integrator Partner Seminar2014 Substation automation trends Hugo E. Meier, Heidelberg, Germany, June 2014 Integrator Partner Seminar2014 Substation automation trends Substation automation trends Contents Product Portfolio Trends in substation automation Cyber Security

More information

Standard CIP Cyber Security Critical Cyber Asset Identification

Standard CIP Cyber Security Critical Cyber Asset Identification Standard CIP 002 1 Cyber Security Critical Cyber Asset Identification Standard Development Roadmap This section is maintained by the drafting team during the development of the standard and will be removed

More information

Industry role moving forward

Industry role moving forward Industry role moving forward Discussion with National Research Council, Workshop on the Resiliency of the Electric Power Delivery System in Response to Terrorism and Natural Disasters February 27-28, 2013

More information

Physical Security. Introduction. Brian LeBlanc

Physical Security. Introduction. Brian LeBlanc Physical Security Introduction 1 Physical Security Provides for the protection of property, personnel, facilities, and material against unauthorized entry, trespass, damage, sabotage, theft, or other criminal

More information

SYMANTEC: SECURITY ADVISORY SERVICES. Symantec Security Advisory Services The World Leader in Information Security

SYMANTEC: SECURITY ADVISORY SERVICES. Symantec Security Advisory Services The World Leader in Information Security SYMANTEC: SECURITY ADVISORY SERVICES Symantec Security Advisory Services The World Leader in Information Security Knowledge, as the saying goes, is power. At Symantec we couldn t agree more. And when it

More information

Credit Union Cyber Crisis: Gaining Awareness and Combatting Cyber Threats Without Breaking the Bank

Credit Union Cyber Crisis: Gaining Awareness and Combatting Cyber Threats Without Breaking the Bank Credit Union Cyber Crisis: Gaining Awareness and Combatting Cyber Threats Without Breaking the Bank Introduction The 6,331 credit unions in the United States face a unique challenge when it comes to cybersecurity.

More information

Disaster Recovery and Business Continuity Planning (Mile2)

Disaster Recovery and Business Continuity Planning (Mile2) Disaster Recovery and Business Continuity Planning (Mile2) Course Number: DRBCP Length: 4 Day(s) Certification Exam This course will help you prepare for the following exams: ABCP: Associate Business Continuity

More information

GridEx IV Panel Discussion

GridEx IV Panel Discussion GridEx IV Panel Discussion NERC GridSecCon October, 2016 1 Generation 254 GW Transmission Geography 120,000 Miles 22 States GridEx IV Panel Discussion Focus on Operations NERC GridSecCon October 20, 2016

More information