Security Guidelines Working Group Update Public Release Security Guidelines Working Group Update CIPC Meeting Denver CO September 29, 2005 Seiki Harada SGWG Chair

Discussion Item: Decision Items: 1 SGWG Name Change 2 SGWG Membership Renewal 3 CIPC Document Review Process 4 Review of the Threat Alert Physical Response Guideline Information Items: 6 SGWG Business Objectives for 2005 7 Guidelines Review Status 8 Succession Plan - SGWG Chair

Working Group Name Change The CIPC meeting of 2005 June precluded ‘standard’ documents from the review responsibility of SGWG. Based on this, in May 17, CIPC endorsed dropping ‘S’ from SGWG, and make it GWG. The working group had a second thought about the abbreviation. We now seek approval to keep the SGWG abbreviation and interpret the first character as “Security”.

SGWG Membership Renewal: The Issue: There are 23 names on the current SGWG roster NERC meeting procedure requires: a quorum of 2/3 of the registered member 2/3 majority for a decision making In any of the SGWG meetings in the past, we were not able to attain the quorum

SGWG Membership Renewal: The Proposal: Voting Members: 6 – 8 members representing Operations, Cyber Security, Physical Security. Non-voting contributors

CIPC Document Review Process Discussion Points: In the June 2005 CIPC meeting, a process flow diagram for SGWG document review was endorsed (see next foil). CIPC still needed a higher level process of which the SGWG process is a part. We propose such a process for approval.

CIPC Document Review Process

Security Guideline Process Flow Origin- ator CIPC EXEC WG or TF SGWG CIPC EXEC CIPC NERC Board CIPC Need Review Approve Prioritize Owner Sponsor Resources Scope Draft Content Expertise Iterate w/Industry Format Consistency Terminology Review Adopt Distribute Train Cycle Track Guideline Status and Progress Post for Final Review Facilitate Vote Initiate Review on 2 Year Cycle NERC Staff

Updated Guideline DRAFT: Agenda Discussion and approval of the combined guidelines, “Threat Alert System and Physical Response” Version 2.1 This guideline is a combination of: Threat Alert System and Physical Response Guidelines for the Electric Sector Version 2.0 Threat Response Version 2.0

SGWG Objectives for 2005 Target: Status: 1 Secure endorsement for the standard document shell for CIPC guidelines Complete 2 Identify CIPC document types and define as to purpose, application rules, relationships with other documents 3 Review existing guidelines and recommend for updating or discontinuance 4 Recommend streamlining of reviewing and approving CIPC guidelines In progress 5 On-going reviews of guidelines and other documents On-going

Status of Document Reviews Refer to the Word document: “Guideline Review Status” Discussion Points: Reviewed 10 guidelines in March 2005 5 more reviewed by Sep 2005 All of guidelines over ~ 12 months are reviewed now. Assignments for drafting new versions and reviews of the new versions to follow.

Succession Plan – SGWG Chair: Discussion Points: The incumbent is packing it in, in six months Preferred transition target: 2006 January Any volunteers?