CIP Version 5 Update

OC Meeting

November 7, 2013

2

Agenda

• CIP Version 4 & 5 Update

• NERC CIP V5 Transition Study

• FRCC CIP V5 Transition Webinar

3

CIP Version 4 & 5 Transition Update

4

CIP Version 4 & 5 Transition Update

NERC’s Transition Guidance Highlights

• NERC Updated on 9/5/2013o Remain with current CIP Version 3 RBAMo Option 1

• Utilize the CIP Version 4 bright-line criteria in its entirety, with the exception of criterion 1.4 (Blackstart Resources) and criterion 1.5 (Cranking Paths), to identify assets subject to the controls in CIP-003-3 through CIP-009-3; or

o Option 2• Utilize the CIP Version 5 “High” and “Medium” Impact Ratings to

identify assets subject to the controls in CIP-003-3 through CIP-009-3.

5

CIP Version 4 & 5 Transition Update

• CIP Version 4 would be superseded when FERC approves Version 5

• Approval date most likely prior to April 2014

• Substantial changes are needed in Version 5

“While the Commission believes that an individual Medium or High Impact asset will have higher potential reliability impacts as compared to an individual Low Impact asset, the Reliability Standards must also enumerate specific, technically-supported cyber security controls for Low Impact assets.”

FERC NOPR Response April 18, 2013

6

CIP Version 5 Transition Study

7

CIP Version 5 Transition Study

• Transition Implementation Studyo NERC selected 7 entitieso Eight regions participating o CIP Version 3 monitoring activities cease for selectedo Scheduled to take place October 2013 to March 2014o Report on experience after 6 Monthso Contribute to Lessons Learned

• Cyber Security Standards Transition Guidanceo Document produced by NERCo Q2 of 2014

8

FRCC CIP Version 5 Transition Webinar

9

FRCC CIP V5 Transition Webinar

• This session will detail the information provided to date for CIP V4 & V5 transition

• FRCC will provide recommendations and hold a Q&A session after each webinar

Update Your Calendars

December 13, 201310:00am to 12:00pm

December 17, 20132:00pm to 4:00pm

10

Questions?