1. CIP Version 5 Update OC Meeting November 7, 2013

2. Agenda CIP Version 4 & 5 Update NERC CIP V5 Transition Study FRCC CIP V5 Transition Webinar 2

3. 3 CIP Version 4 & 5 Transition Update

4. NERC’s Transition Guidance Highlights NERC Updated on 9/5/2013 o Remain with current CIP Version 3 RBAM o Option 1 Utilize the CIP Version 4 bright-line criteria in its entirety, with the exception of criterion 1.4 (Blackstart Resources) and criterion 1.5 (Cranking Paths), to identify assets subject to the controls in CIP-003- 3 through CIP-009-3; or o Option 2 Utilize the CIP Version 5 “High” and “Medium” Impact Ratings to identify assets subject to the controls in CIP-003-3 through CIP-009-3. 4

5. CIP Version 4 & 5 Transition Update CIP Version 4 would be superseded when FERC approves Version 5 Approval date most likely prior to April 2014 Substantial changes are needed in Version 5 5 “While the Commission believes that an individual Medium or High Impact asset will have higher potential reliability impacts as compared to an individual Low Impact asset, the Reliability Standards must also enumerate specific, technically- supported cyber security controls for Low Impact assets.” FERC NOPR Response April 18, 2013

6. 6 CIP Version 5 Transition Study

7. Transition Implementation Study o NERC selected 7 entities o Eight regions participating o CIP Version 3 monitoring activities cease for selected o Scheduled to take place October 2013 to March 2014 o Report on experience after 6 Months o Contribute to Lessons Learned Cyber Security Standards Transition Guidance o Document produced by NERC o Q2 of 2014 7

8. 8 FRCC CIP Version 5 Transition Webinar

9. FRCC CIP V5 Transition Webinar This session will detail the information provided to date for CIP V4 & V5 transition FRCC will provide recommendations and hold a Q&A session after each webinar 9 Update Your Calendars December 13, 2013 10:00am to 12:00pm December 17, 2013 2:00pm to 4:00pm

10. 10 Questions?