1. ORSTF Proposal

2. Situational Awareness and Security Monitoring Subcommittee (SASMS)
CIIMS becomes SASMS
Combine DEWG and EMSWG supporting SASMS
EMSWG
Coordinates the development of network and data modeling policies in support of EMS throughout the Western Interconnection
DEWG
Traditionally focused on the WECC Operations Network (WON)
The WON has been replaced by a hub-and-spoke configuration managed at the entity
Now deals more with issues specific to data policy and less with the infrastructure
As the focus shifted, it aligns more with EMSWG
The two work groups have been meeting jointly but have preferred to remain separate for one key reason, participation
Work groups deal with overlapping subjects but each has different skillsets
Many entities cover the data-exchange and EMS responsibilities separately
Representation of both aspects is critical to the success of the work group
Need to maintain larger representation

3. Situational Awareness and Security Monitoring Subcommittee (SASMS)
Work Groups supporting SASMS
TELWG
Infrastructure coordination for telecomm services
Best practices, guidelines, etc.
PSWG
Active and large work group
Encourage sharing lessons learned, best practices, etc., more widely
Recommend engaging NERC Physical Security Subcommittee

4. Situational Awareness and Security Monitoring Subcommittee (SASMS)
Work Groups supporting SASMS
CSWG
Address “gap” between
Cyber security experts
Regulatory compliance
Management of EMS
Provides focus on cyber security
Acts as a liaison forum
Technical experts and the compliance/security professionals
Western Interconnection stakeholders and the various national cyber security groups: NERC, the Department of Homeland Security, etc.
This group will add value to current CIP efforts and promote reliability and security within the Western Interconnection