NERC Monitoring and Situational Awareness Conference: Loss of Control Center Procedures and Testing Practices
|
|
|
- Poppy Wilcox
- 5 years ago
- Views:
Transcription
1 NERC Monitoring and Situational Awareness Conference: Loss of Control Center Procedures and Testing Practices Ed Batalla Director of Technology Florida Power & Light Company September 19, 2013
2 Florida Power & Light Company (FPL) Overview FPL EMS Overview FPL Control Centers / Infrastructure Philosophy Problem Statement EMS Availability Viability of Backup Processes Solutions Agenda PLAN: Solidify Backup Procedures PREPARE: Failover Testing Processes MITIGATE: Improve Alternative Real-Time Assessment Tools/Methods Q&A 2
3 Florida Power & Light (FPL) is the largest electric utility in Florida and one of the largest rate-regulated utilities in the United States FPL is a subsidiary of NextEra Energy, Inc. (NEE) One of the largest U.S. electric utilities Vertically integrated, retail rate-regulated 4.6 MM customer accounts 24,653 MW in operation $10.1 B in operating revenues $36 B in total assets FPL Overview NOTE: All data as of June 30, 2013, except operating revenue which is for the year ended December 31,
4 FPL s Energy Management System (EMS) was upgraded on 11/10/2012 it is a major component of the suite of missioncritical systems grouped as Grid Control Systems (GCS) Energy Management System (EMS) Overview Vendor: Commissioned: 11/10/2012 Version: Benefits of the upgrade Improved redundancy and geographic diversity Advanced reliability tools Enhanced cyber security (user authentication) EMS Interfaces Power Plants Substations (T&D) External Utilities Distribution Control Centers Performance Diagnostic Centers Historian Systems Other Corporate Systems FPL s EMS was upgraded to modernize system technology and infrastructure 4
5 FPL has geographically diverse and redundant control centers which contain the Grid Control Systems (GCS) an integral part of our business continuity and recovery plans Backup Control Center (BUCC) Facility FPL EMS is also used by FRCC Reliability Coordinator (RC) Distribution Control Centers (use and access same EMS) Fully functional backup control center capable of being activated within the required standards and has tools that closely replicate the primary control center and minimizes activation confusion System Control Center (SCC) Facility Local Backup Control Center Remote Backup Control Center The control room has emergency communication methods for loss of the primary communication tools; also has access to the Backup Control Center 5
6 FPL s EMS uses state-of-the-art infrastructure systems and technology Infrastructure Design/Philosophy Geographically diverse and redundant control center facilities Each facility equipped with redundant systems, but each facility backs up the other facility Connected via dedicated and redundant communication links Diverse and redundant communications to all FPL substations SCADA data from FPL substations are dual-scanned from both the primary and backup control center facilities Cybersecurity via defense-in-depth philosophy (logical separation of control center network from corporate network) 6
7 There are event categories directly related to the loss of monitoring or control functionality for control centers procedures and testing practices need to be strengthened Event Categories Category 1 Events Unplanned evacuation from a control center facility with BPS SCADA functionality Loss of monitoring or control, at a control center, such that it significantly affects the entity s ability to make operating decisions Category 2 Events Complete loss of all BPS control center voice communication systems Complete loss of SCADA, control or monitoring functionality Source: Electric Reliability Organization Event Analysis Process Version 2 (July 2013) 7
8 FPL implemented solutions to improve control center procedures and testing practices PLAN: Solidify recovery and business continuity plans PREPARE: Validate backup control center processes through actual technology viability validation Failover processes Solutions Track performance MITIGATE: Continuous improvements on alternative real-time assessment tools Measuring performance is key to ensure backup process viability 8
9 FPL has extensive business continuity / recovery plans for all electronic systems Business Continuity Plan (BCP) / Recovery Plan (RP) Primary Control Center Facility Manned with Operators (RC, TOP, BA, IA) Technology Support Provided through Operational Technology Center (OTC) and callout support Backup Control Center Full redundant system (with diverse communication paths) Unmanned no Operators BCP and RP specify criteria for evacuation Technology Support -- remotely supported (technical team located at primary facility) The recovery plan is reviewed and tested annually pursuant to NERC CIP Standards 9
10 BCP and RP has defined a set of criteria to evacuate the primary control facility Evacuation Criteria Criteria for Evacuation Incapacitated facility (fire, terrorist attack) Total loss of building power supply Critical function unavailability at the primary control center facility With no ability to connect to backup control center servers Redundant pair EMS or SCADA Front End not available Evacuation Process and Interim Provisions Since the backup control center is unmanned, FPL implemented interim control centers to facilitate evacuation process to meet the EOP Standards Local Backup Control Center (adjacent building) Remote Backup Control Center (approx. 5 miles away) 10
11 Health of the system is monitored constantly by 24/7 technology personnel System and Application Health Check FPL established the Operational Technology Center (OTC) organization to improve operational certainty 11
12 Improved monitoring process capabilities with alarming on CA failures CA Solution Progress Monitoring Dashboards were developed to improve situational awareness on real-time assessment tool viability OTC and operators are instructed to be on the high alert for CA yellow and red bar displays 12
13 A CONS OPS button has been added to access Conservative Operations display shows contingency data at key interfaces (in case CA is not available) Conservative Operations Cons Ops Button 13
14 FPL s EMS/SCADA uses high-speed replication of data between two control center sites Memory Replication Services (MRS) is used to replicate data between systems Essential to support failover schemes MRS to Support Failover Schemes Critical operational data is replicated automatically MRS provides a state-of-the-art, high availability configuration and failover scheme for FPL s EMS/SCADA 14
15 FPL purposely performs a weekly scheduled failover of its EMS (and corresponding peripheral systems) to ensure viability of its critical systems (primary and backup systems) Testing Practices Weekly Scheduled Failover Test Cycle through different system configuration to ensure viability Ensures that failover logic is fully functional Coordinated with all users (done every Wednesday morning) Other EOP processes and procedures reinforced during operator training Operators cycle through familiarization of backup systems and control centers CIP required test of recovery plan fulfilled (at least annually) 15
16 Target (Max minutes downtime) Unplanned EMS Unavailability Cumulative Downtime YTD = minutes EMS Unplanned Unavailability Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec G O O D Planned and Unplanned Unplanned FPL tracks cumulative EMS unavailability as part of its key performance indicators 16
17 Depending on the situation, FPL incorporated processes for operators to access alternative real-time assessment tools Alternative Real-Time Assessment Tools Flowgate Display Pre-calculated flowgate limits Uses data that is not dependent on the EMS Other displays were developed that uses non-ems data sources CA solution sharing between reliability entities within the FRCC Currently being piloted 17
18 FPL has three major focus areas for its continuous improvement plan to continue to strengthen control center procedures and testing practices Final Note Reliability entities need to continue to strengthen control center procedures and testing practices FPL has three major focus areas for its continuous improvement plan: PLAN: Solidify recovery and business continuity plans PREPARE: Validate backup control center processes through actual technology viability validation MITIGATE: Continuous improvements on alternative real-time assessment tools 18
19
2 nd Annual NERC Monitoring and Situational Awareness Conference: FPL s Operational Technology Center
2 nd Annual NERC Monitoring and Situational Awareness Conference: FPL s Operational Technology Center Ed Batalla Director of Grid Control Systems Florida Power & Light Company Sept. 24, 2014 Florida Power
Analysis of EMS Outages
Analysis of EMS Outages Venkat Tirupati, LCRA, Supervisor EMS SW & Advanced Applications NERC 3 rd Annual Monitoring and Situational Awareness Conference September 29-30, 2015 Agenda Introduction Common
CIP V5 Implementation Study SMUD s Experience
CIP V5 Implementation Study SMUD s Experience Tim Kelley October 16, 2014 Powering forward. Together. SMUD Fast Facts General Information SMUD employs approximately 2,000 individuals Service area of 900
Standard CIP Cyber Security Critical Cyber Asset Identification
Standard CIP 002 1 Cyber Security Critical Cyber Asset Identification Standard Development Roadmap This section is maintained by the drafting team during the development of the standard and will be removed
Standard CIP Cyber Security Critical Cyber Asset Identification
Standard CIP 002 1 Cyber Security Critical Cyber Asset Identification Standard Development Roadmap This section is maintained by the drafting team during the development of the standard and will be removed
Implementation Plan for Version 5 CIP Cyber Security Standards
Implementation Plan for Version 5 CIP Cyber Security Standards April 10September 17, 2012 Note: On September 17, 2012, NERC was alerted that some references in the Initial Performance of Certain Periodic
Compliance Enforcement Initiative
Compliance Enforcement Initiative Filing and Status Update November 2, 2011 Rebecca Michael Status of the Filings NERC filed several components of the Compliance Enforcement Initiative on September 30,
State of Reliability Report 2013
State of Reliability Report 2013 Jessica Bian, Director of Performance Analysis Reliability Assessment and Performance Analysis (RAPA), NERC Risk Issues Steering Committee Meeting, July 11-12, 2013 State
Why Should You Care About Control System Cybersecurity. Tim Conway ICS.SANS.ORG
Why Should You Care About Control System Cybersecurity Tim Conway ICS.SANS.ORG Events Example #1 Dec 23, 2015 Cyber attacks impacting Ukrainian Power Grid Targeted, synchronized, & multi faceted Three
Wide-Area Reliability Monitoring and Visualization Tools
OE Visualization and Controls Peer Review Wide-Area Reliability Monitoring and Visualization Tools Carlos Martinez CERTS - Electric Power Group 21 October 2008 Washington, D.C. Presentation Outline Research
CIP-014. JEA Compliance Approach. FRCC Fall Compliance Workshop Presenter Daniel Mishra
CIP-014 JEA Compliance Approach FRCC Fall Compliance Workshop Presenter Daniel Mishra Acronyms & Terminologies DHS Department of Homeland Security JEA It s not an acronym JSO Jacksonville Sheriff's Office
Low Impact Generation CIP Compliance. Ryan Walter
Low Impact Generation CIP Compliance Ryan Walter Agenda Entity Overview NERC CIP Introduction CIP-002-5.1, Asset Classification What Should Already be Done CIP-003-7, Low Impact Requirements Tri-State
CIP Cyber Security Standards. Development Update
CIP Cyber Security Standards Development Update John Lim Consolidated Edison Co. of New York Rob Antonishen Ontario Power Generation September 21-22, 2010 1 Disclaimer This NPCC TFIST workshop provides
Implementation Plan for COM-001-2
Defined Terms in the NERC Glossary The RC SDT proposes the following new definitions: Interpersonal Communication: Any medium that allows two or more individuals interact, consult, or exchange information.
Empowering Operations with the PI System
Empowering Operations with the PI System Presented by Thomas Marshall, IT Manager, PI Support NRG Energy Agenda o About NRG Energy o History of the NRG PI System Fleet Program o Timeline \ Milestones o
Smart Grid Standards and Certification
Smart Grid Standards and Certification June 27, 2012 Annabelle Lee Technical Executive Cyber Security alee@epri.com Current Environment 2 Current Grid Environment Legacy SCADA systems Limited cyber security
Title. Critical Infrastructure Protection Getting Low with a Touch of Medium. CanWEA Operations and Maintenance Summit 2018.
Critical Infrastructure Protection Getting Low with a Touch of Medium Title CanWEA Operations and Maintenance Summit 2018 January 30, 2018 George E. Brown Compliance Manager Acciona Wind Energy Canada
Florida State University
Florida State University Disaster Recovery & Business Continuity Planning Overview October 24, 2017 1 Key Readiness Questions Has your department identified the business functions and infrastructure that
DRAFT. Cyber Security Communications between Control Centers. March May Technical Rationale and Justification for Reliability Standard CIP-012-1
DRAFT Cyber Security Communications between Control Centers Technical Rationale and Justification for Reliability Standard CIP-012-1 March May 2018 NERC Report Title Report Date I Table of Contents Preface...
Loss of Control Center Functionality: EOP-008-1, CIP-008-3, CIP September 30, 2014
Loss of Control Center Functionality: EOP-008-1, CIP-008-3, CIP-009-3 September 30, 2014 James Williams Lead Compliance Specialist jwilliams.re@spp.org 501.614.3261 Jeremy Withers Senior Compliance Specialist
Chapter X Security Performance Metrics
Chapter X Security Performance Metrics Page 1 of 9 Chapter X Security Performance Metrics Background For the past two years, the State of Reliability report has included a chapter for security performance
IT Updates. Maryland Health Benefit Exchange Board Meeting April 15, Presented by: Isabel FitzGerald Secretary, DoIT
IT Updates Maryland Health Benefit Exchange Board Meeting April 15, 2014 Presented by: Isabel FitzGerald Secretary, DoIT A service of Maryland Health Benefit Exchange Agenda Overview of process for CT
Critical Cyber Asset Identification Security Management Controls
Implementation Plan Purpose On January 18, 2008, FERC (or Commission ) issued Order. 706 that approved Version 1 of the Critical Infrastructure Protection Reliability Standards, CIP-002-1 through CIP-009-1.
New Brunswick 2018 Annual Implementation Plan Version 1
New Brunswick Energy and Utilities Board Reliability Standards, Compliance and Enforcement Program New Brunswick 2018 Annual Implementation Plan Version 1 December 28, 2017 Table of Contents Version History...
Table of Contents. Sample
TABLE OF CONTENTS... 1 CHAPTER 1 INTRODUCTION... 4 1.1 GOALS AND OBJECTIVES... 5 1.2 REQUIRED REVIEW... 5 1.3 APPLICABILITY... 5 1.4 ROLES AND RESPONSIBILITIES SENIOR MANAGEMENT AND BOARD OF DIRECTORS...
Low Impact BES Cyber Systems. Cyber Security Security Management Controls CIP Dave Kenney
Low Impact BES Cyber Systems Cyber Security Security Management Controls CIP-003-6 Dave Kenney November 9, 2016 Presentation Agenda Outreach Observations/Audit Approach Cyber Security Awareness Physical
Welcome to the webinar! We will start within a few minutes
Welcome to the webinar! We will start within a few minutes Agenda Introduction Solarplaza Presentations Threat assessment - Tom Tansy SunSpec Alliance Cyber Security & Solar A consultant s view - John
DRAFT Risks and Mitigations for Losing EMS Functions
DRAFT Risks and Mitigations for Losing EMS Functions 1.0 Executive Summary Energy Management System (EMS) is a system of computer-aided tools used by System Operators to monitor, control, and optimize
ISO STANDARD IMPLEMENTATION AND TECHNOLOGY CONSOLIDATION
ISO STANDARD IMPLEMENTATION AND TECHNOLOGY CONSOLIDATION Cathy Bates Senior Consultant, Vantage Technology Consulting Group January 30, 2018 Campus Orientation Initiative and Project Orientation Project
Peter J. Buerling Director, Records & Information Compliance. ReliabilityFirst Workshop April 15, 2016
Peter J. Buerling Director, Records & Information Compliance April 15, 2016 Opening Comments Presentation Topic Disclaimer Presentation Support Introductions Mark Koziel Consultant, CIP Compliance Don
IDEA Campus Energy UNIVERSITY OF MARYLAND Securing Our Networked Utility Infrastructure
IDEA Campus Energy 2018 UNIVERSITY OF MARYLAND Securing Our Networked Utility Infrastructure University of Maryland Presenters Mary-Ann Ibeziako, Director, Facilities Management Engineering & Energy Don
OPUC Workshop March 13, 2015 Cyber Security Electric Utilities. Portland General Electric Co. Travis Anderson Scott Smith
OPUC Workshop March 13, 2015 Cyber Security Electric Utilities Portland General Electric Co. Travis Anderson Scott Smith 1 CIP Version 5 PGE Implementation Understanding the Regulations PGE Attended WECC
Impacts and Implementation: NERC Reliability Standards, Compliance Initiatives, and Regulatory Activities
Impacts and Implementation: NERC Reliability Standards, Compliance Initiatives, and Regulatory Activities NRECA TechAdvantage March 2014 Patti Metro Manager, Transmission & Reliability Standards NRECA
EEI Fall 2008 Legal Conference Boston, Massachusetts Stephen M. Spina November 1,
EEI Fall 2008 Legal Conference Boston, Massachusetts Stephen M. Spina November 1, 2008 www.morganlewis.com Overview Reliability Standards Enforcement Framework Critical Infrastructure Protection (CIP)
Overview of DSASP; Telemetry/Communication Alternatives
Overview of DSASP; Telemetry/Communication Alternatives The New York Independent System Operator Price Responsive Load Working Group May 12, 2010 Agenda Overview of DSASP Market Rules Current Communications/Telemetry
B O N N E V I L L E A D M I N I S T R A T I O N B O N N E V I L L E P O W E R A D M I N I S T R A T I O N
B O N N E V I L L E A D M I N I S T R A T I O N B O N N E V I L L E P O W E R A D M I N I S T R A T I O N NERC Monitoring and Situational Awareness Conference Bonneville Power Administration Self-Monitoring:
Grid Security & NERC
Grid Security & NERC Janet Sena, Senior Vice President, Policy and External Affairs Southern States Energy Board 2017 Associate Members Winter Meeting February 27, 2017 Recent NERC History Energy Policy
ERO Enterprise IT Projects Update
ERO Enterprise IT Projects Update Stan Hoptroff, Vice President, Chief Technology Officer and Director of Information Technology Technology and Security Committee Meeting November 6, 2018 Agenda ERO IT
Analysis of CIP-006 and CIP-007 Violations
Electric Reliability Organization (ERO) Compliance Analysis Report Reliability Standard CIP-006 Physical Security of Critical Cyber Assets Reliability Standard CIP-007 Systems Security Management December
Strategy Consulting Digital Technology Operations. Transmission Distribution SCADA Separation 2017 EMMOS Conference
Strategy Consulting Digital Technology Operations Transmission Distribution SCADA Separation 2017 EMMOS Conference SCADA for Electric Utility Operations The SCADA platform is at the heart of Electric Utility
WEI Conference SDG&E TCRI Project April 25, 2018 Mark Fowler, CISSP
WEI Conference SDG&E TCRI Project April 25, 2018 Mark Fowler, CISSP San Diego Gas & Electric Subsidiary of Sempra Energy 4100 Full-Time Employees Regulated public utility Providing clean, safe & reliable
New Concept for Article 36 Networking and Management of the List
New Concept for Article 36 Networking and Management of the List Kerstin Gross-Helmert, AFSCO 28 th Meeting of the Focal Point Network EFSA, MTG SEAT 00/M08-09 THE PRESENTATION Why a new concept? What
North American Portability Management, LLC LNPA Transition Contingency Rollback. Industry Working Session January 16 th, 2018
North American Portability Management, LLC LNPA Transition Contingency Rollback Industry Working Session January 16 th, 2018 Agenda Resubmission Aid Issue 2 Refinements and updated plan Decision Process
SmartGrid. Implications of Cloud Computing. New Technology in the Utility Environment
1 SmartGrid Implications of Cloud Computing New Technology in the Utility Environment PG&E Territory Characteristics 70,000 square miles of diverse topography Approximately 20,000 employees Energy Services
ERS IT Portfolio Report
Administration and Operations Committee ERS IT Portfolio Report January 21 st, 2014 1 Agenda Information Technology Projects Summary 2013 End of Year Metrics Project Management Office CMERS Website Applications
B O N N E V I L L E A D M I N I S T R A T I O N B O N N E V I L L E P O W E R A D M I N I S T R A T I O N
B O N N E V I L L E A D M I N I S T R A T I O N B O N N E V I L L E P O W E R A D M I N I S T R A T I O N NERC Monitoring and Situational Awareness Conference Bonneville Power Administration Loss of EMS:
Implementation Plan for Newly Identified Critical Cyber Assets and Newly Registered Entities
Implementation Plan for Newly Identified Critical Cyber Assets and Newly Registered Entities This Implementation Plan applies to Cyber Security Standards CIP-002-2 through CIP-009-2 and CIP-002-3 through
Disclaimer Executive Summary Introduction Overall Application of Attachment Generation Transmission...
CIP-002-4 Cyber Security Critical Cyber Asset Identification Rationale and Implementation Reference Document September, 2010 Table of Contents TABLE OF CONTENts Disclaimer... 3 Executive Summary... 4 Introduction...
North American Portability Management, LLC Transition Oversight Manager. TOEP Webcast November 7, 2017
North American Portability Management, LLC Transition Oversight Manager TOEP Webcast November 7, 2017 Welcome to today s webcast Submit Questions for Q&A Webcast Issues Click the Q&A widget at the bottom
Analysis of EMS Outages
Analysis of EMS Outages Venkat Tirupati, LCRA, Supervisor EMS & Advanced Applications NERC 2 nd Annual Monitoring and Situational Awareness Conference September 22, 2 Agenda Introduction Common themes
Cyber Security Supply Chain Risk Management
Cyber Security Supply Chain Risk Management JoAnn Murphy, SDT Vice Chair, PJM Interconnection May 31, 2017 FERC Order No. 829 [the Commission directs] that NERC, pursuant to section 215(d)(5) of the FPA,
Chapter X Security Performance Metrics
Chapter X Security Performance Metrics Page 1 of 10 Chapter X Security Performance Metrics Background For many years now, NERC and the electricity industry have taken actions to address cyber and physical
Implementation Plan for Newly Identified Critical Cyber Assets and Newly Registered Entities
Implementation Plan for Newly Identified Critical Cyber Assets and Newly Registered Entities This Implementation Plan applies to Cyber Security Standards CIP-002-2 through CIP-009-2 and CIP-002-3 through
Pushing the Limits. ADSM Symposium Sheelagh Treweek September 1999 Oxford University Computing Services 1
Pushing the Limits ADSM Symposium Sheelagh Treweek sheelagh.treweek@oucs.ox.ac.uk September 1999 Oxford University Computing Services 1 Overview History of ADSM services at Oxford October 1995 - started
where we are, where we could be, how we can get there. 12/14/2011
Central Plant Optimization ASHRAE National Capitol Chapter - PES Wednesday, Nov 7, 2011 Dave Klee, LEED AP Director, Optimized Building Solutions Johnson Controls, Inc. 1 1 J o http://www.johnsoncontrols.com/cpo
BUSINESS CONTINUITY MANAGEMENT PROGRAM OVERVIEW
BUSINESS CONTINUITY MANAGEMENT PROGRAM OVERVIEW EXECUTIVE SUMMARY CenturyLink is committed to ensuring business resiliency and survivability during an incident or business disruption. Our Corporate Business
Regulatory Impacts on Research Topics. Jennifer T. Sterling Director, Exelon NERC Compliance Program
Regulatory Impacts on Research Topics Jennifer T. Sterling Director, Exelon NERC Compliance Program The 2003 Blackout On August 14, 2003, an electric power blackout affected large portions of the Northeast
San Joaquin County Emergency Medical Services Agency
San Joaquin County Emergency Medical Services Agency http://www.sjgov.org/ems Memorandum TO: All Interested Parties FROM: Rick Jones, EMS Analyst DATE: January, 19 Mailing Address PO Box French Camp, CA
Potential CIP decision tree for PMUs
Potential CIP decision tree for PMUs Questions Is the PMU used to control and/or protect high or medium classified BES equipment? If Yes, device should be classified CIP JDK Comments If any type of automated
Cyber Security For Utilities Risks, Trends & Standards. IEEE Toronto March 22, Doug Westlund Senior VP, AESI Inc.
Cyber Security For Utilities Risks, Trends & Standards IEEE Toronto March 22, 2017 Doug Westlund Senior VP, AESI Inc. Agenda Cyber Security Risks for Utilities Trends & Recent Incidents in the Utility
GridEx IV Panel Discussion
GridEx IV Panel Discussion NERC GridSecCon October, 2016 1 Generation 254 GW Transmission Geography 120,000 Miles 22 States GridEx IV Panel Discussion Focus on Operations NERC GridSecCon October 20, 2016
Cyber Security for Process Control Systems ABB's view
Kaspersky ICS Cybersecurity 2017, 2017-09-28 Cyber Security for Process Control Systems ABB's view Tomas Lindström, Cyber Security Manager, ABB Control Technologies Agenda Cyber security for process control
COMPASS FOR THE COMPLIANCE WORLD. Asia Pacific ICS Security Summit 3 December 2013
COMPASS FOR THE COMPLIANCE WORLD Asia Pacific ICS Security Summit 3 December 2013 THE JOURNEY Why are you going - Mission Where are you going - Goals How will you get there Reg. Stnd. Process How will
Standard CIP Cyber Security Systems Security Management
A. Introduction 1. Title: Cyber Security Systems Security Management 2. Number: CIP-007-1 3. Purpose: Standard CIP-007 requires Responsible Entities to define methods, processes, and procedures for securing
Council, 26 March Information Technology Report. Executive summary and recommendations. Introduction
Council, 26 March 2014 Information Technology Report Executive summary and recommendations Introduction This report sets out the main activities of the Information Technology Department since the last
Infocomm Professional Development Forum 2011
Infocomm Professional Development Forum 2011 1 Agenda Brief Introduction to CITBCM Certification Business & Technology Impact Analysis (BTIA) Workshop 2 Integrated end-to-end approach in increasing resilience
Concept White Paper. Concepts for Proposed Content of Eventual Standard(s) for Project : Real-Time Monitoring and Analysis Capabilities
Concept White Paper Concepts for Proposed Content of Eventual Standard(s) for Project 2009-02: Real-Time Monitoring and Analysis Capabilities Real-time Monitoring and Analysis Capabilities Standard Drafting
San Francisco Department of Public Health. IT and Epic Project Update
San Francisco Department of Public Health IT and Epic Project Update Health Commission, April 16, 2019 IT: Infrastructure Accomplishments Sweeping Improvements Across DPH Thousands of devices are Epic
Cybersecurity Overview
Cybersecurity Overview DLA Energy Worldwide Energy Conference April 12, 2017 1 Enterprise Risk Management Risk Based: o Use of a risk-based approach for cyber threats with a focus on critical systems where
INFORMATION SECURITY- DISASTER RECOVERY
Information Technology Services Administrative Regulation ITS-AR-1505 INFORMATION SECURITY- DISASTER RECOVERY 1.0 Purpose and Scope The objective of this Administrative Regulation is to outline the strategy
Chief Executive Officer. Pacific Northwest Utilities Conference Committee Portland, Oregon March 8, 2013
Mark W. Maher Chief Executive Officer Pacific Northwest Utilities Conference Committee Portland, Oregon March 8, 2013 Agenda WECC Overview WECC Strategic Planning Initiative Western Interconnection Synchrophasor
Cybersecurity is a Team Sport
Cybersecurity is a Team Sport Cyber Security Summit at Loyola Marymount University - October 22 2016 Dr. Robert Pittman, CISM Chief Information Security Officer National Cyber Security Awareness Month
BILLING CODE P DEPARTMENT OF ENERGY Federal Energy Regulatory Commission. [Docket No. RM ] Cyber Systems in Control Centers
![BILLING CODE P DEPARTMENT OF ENERGY Federal Energy Regulatory Commission. [Docket No. RM ] Cyber Systems in Control Centers](/thumbs/93/112224967.jpg "BILLING CODE P DEPARTMENT OF ENERGY Federal Energy Regulatory Commission. [Docket No. RM ] Cyber Systems in Control Centers")
This document is scheduled to be published in the Federal Register on 07/28/2016 and available online at http://federalregister.gov/a/2016-17854, and on FDsys.gov BILLING CODE 6717-01-P DEPARTMENT OF ENERGY
2014 Software Global Client Conference
WW HMI SCADA-10 Best practices for distributed SCADA Stan DeVries Senior Director Solutions Architecture What is Distributed SCADA? It s much more than a distributed architecture (SCADA always has this)
Digital Wind Cyber Security from GE Renewable Energy
Digital Wind Cyber Security from GE Renewable Energy BUSINESS CHALLENGES The impact of a cyber attack to power generation operations has the potential to be catastrophic to the renewables industry as well
SFC strengthens internet trading regulatory controls
SFC strengthens internet trading regulatory controls November 2017 Internet trading What needs to be done now? For many investors, online and mobile internet trading is now an everyday interaction with
MISO PJM Joint and Common Market Cross Border Transmission Planning
MISO PJM Joint and Common Market Cross Border Transmission Planning May 30, 2018 1 Coordinated System Plan Study 2 Using information from the March 30 Annual Issues Review, the JRPC has decided to perform
North American Portability Management, LLC LNPA Transition Contingency Rollback. Industry Discussion July 12 th, 2017
North American Portability Management, LLC LNPA Transition Contingency Rollback Industry Discussion July 12 th, 2017 Agenda Introduction Transition overview, definition of rollback, and background Rollback
playbook OpShield for NERC CIP 5 sales PlAy
playbook OpShield for NERC CIP 5 sales PlAy OpShield for NERC CIP 5 The Problem U.S. bulk power entities are federally mandated to comply with NERC CIP requirements that dictate industrial security and
Network Code on Emergency and Restoration - Implementation Guide for the Communication Systems Requirements. Final VERSION
Network Code on Emergency and Restoration - Implementation Guide for the Communication Systems Requirements Final VERSION September 2018 1 TABLE OF CONTENTS 1 INTRODUCTION... 3 1.1 COMMUNICATION SYSTEM
Instructor training course schedule v3 Confirmed courses due completion by 31 st July 2019
Confirmed courses due completion by 31 st July 2019 Courses: 2 Orientation 2 IoT Fundamentals 2 Networking Essentials 2 Cybersecurity Essentials 2 IT Essentials: PC Hardware and Software 2 CCNA Routing
Cyber Security Defense-In-depth RICH KINAS ORLANDO UTILITIES COMMISSION COMPLIANCE SPRING WORKSHOP MAY 9-10, 2017
1 Cyber Security Defense-In-depth RICH KINAS ORLANDO UTILITIES COMMISSION COMPLIANCE SPRING WORKSHOP MAY 9-10, 2017 Overview 2 Defense-In-Depth Verses layered defense Verses Enhanced Security NERC Reliability
Critical Infrastructure Protection (CIP) Version 5 Revisions. Standard Drafting Team Update Industry Webinar September 19, 2014
Critical Infrastructure Protection (CIP) Version 5 Revisions Standard Drafting Team Update Industry Webinar September 19, 2014 Administrative Items NERC Antitrust Guidelines It is NERC s policy and practice
Standard CIP Cyber Security Systems Security Management
A. Introduction 1. Title: Cyber Security Systems Security Management 2. Number: CIP-007-4 3. Purpose: Standard CIP-007-4 requires Responsible Entities to define methods, processes, and procedures for securing
Standard Development Timeline
CIP-002-6 Cyber Security BES Cyber System Categorization Standard Development Timeline This section is maintained by the drafting team during the development of the standard and will be removed when the
Agenda Event Analysis Subcommittee Conference Call
Agenda Event Analysis Subcommittee Conference Call August 14, 2013 11:00 a.m. 1:00 p.m. Eastern Ready Talk Conference Call and Web Meeting Information: Dial-In: 1-866-740-1260 Access Code: 6517175 Security
Dan Lobb CRISC Lisa Gable CISM Katie Friebus
Dan Lobb CRISC Lisa Gable CISM Katie Friebus AGENDA Meet the speakers Compliance between QSA visits - Dan Lobb Transitioning from PCI DSS 3.1-3.2 - Katie Friebus Tips for Managing a PCI Compliance Program
How AlienVault ICS SIEM Supports Compliance with CFATS
How AlienVault ICS SIEM Supports Compliance with CFATS (Chemical Facility Anti-Terrorism Standards) The U.S. Department of Homeland Security has released an interim rule that imposes comprehensive federal
CYBER SECURITY POLICY REVISION: 12
1. General 1.1. Purpose 1.1.1. To manage and control the risk to the reliable operation of the Bulk Electric System (BES) located within the service territory footprint of Emera Maine (hereafter referred
Threat and Hazard Identification and Risk Assessment (THIRA) In Progress Review (IPR) July 2012
Threat and Hazard Identification and Risk Assessment (THIRA) In Progress Review (IPR) 2 13 July 2012 1 Roll Call Region A Region B Region C Region D Region E Region F Region G Region H Region I STL UASI
Council, 8 February 2017 Information Technology Report Executive summary and recommendations
Council, 8 February 2017 Information Technology Report Executive summary and recommendations Introduction This report provides the Council with an update into the work of the Information Technology Directorate
Implementing Cyber-Security Standards
Implementing Cyber-Security Standards Greg Goodrich TFIST Chair, CISSP New York Independent System Operator Northeast Power Coordinating Council General Meeting Montreal, QC November 28, 2012 Topics Critical
NERC and Regional Coordination Update
NERC and Regional Coordination Update Mark Kuras Sr. Lead Engineer, NERC and Regional Coordination Planning Committee April 7, 2016 NERC Standards Under Development Standards Project Activity Due Date
Standard CIP 007 4a Cyber Security Systems Security Management
A. Introduction 1. Title: Cyber Security Systems Security Management 2. Number: CIP-007-4a 3. Purpose: Standard CIP-007-4 requires Responsible Entities to define methods, processes, and procedures for
Current procedures, challenges and opportunities for collection and analysis of Criminal Justice statistics CERT-GH
Current procedures, challenges and opportunities for collection and analysis of Criminal Justice statistics CERT-GH International Workshop on Criminal Justice Statistics on Cybercrime and Electronic Evidence
Dmitry Ishchenko/Reynaldo Nuqui/Steve Kunsman, September 21, 2016 Collaborative Defense of Transmission and Distribution Protection & Control Devices
Dmitry Ishchenko/Reynaldo Nuqui/Steve Kunsman, September 21, 2016 Collaborative Defense of Transmission and Distribution Protection & Control Devices Against Cyber Attacks (CODEF) Cyber Security of the
Jim Brenton Regional Security Coordinator ERCOT Electric Reliability Council of Texas
Jim Brenton Regional Security Coordinator ERCOT Electric Reliability Council of Texas Facts expressed in this presentation are Facts Opinions express in this presentation are solely my own The voices I
Purpose. ERO Enterprise-Endorsed Implementation Guidance
Lesson Learned CIP Version 5 Transition Program CIP-002-5.1 Requirement R1: Impact Rating of Generation Resource Shared BES Cyber Systems Version: January 29, 2015 Authorized by the Standards Committee
primary Control Center, for the exchange of Real-time data with its Balancing
A. Introduction 1. Title: Reliability Coordination Monitoring and Analysis 2. Number: IRO-002-5 3. Purpose: To provide System Operators with the capabilities necessary to monitor and analyze data needed
Midwest ISO Overview - ATC Customer Meeting. February 26, 2009
Midwest ISO Overview - ATC Customer Meeting February 26, 2009 Agenda Overview January 2009 Dashboard Module E RAR Timeline Questions 2 Overview January was characterized by seasonal cold temperatures,