Meeting Minutes Critical Infrastructure Protection Committee September 15-16, 2015 JW Marriott New Orleans 614 Canal Street New Orleans, LA 70130

The Critical Infrastructure Protection Committee (CIPC) Chair Chuck Abell called the meeting to order and, being duly noticed, the regular meeting of CIPC on September 15, 2015, began at 1:00 p.m. (CDT). Mr. Bob Canada, substituting for Ms. Laura Brown as CIPC Secretary, declared a quorum to conduct business with 30 members present. Acting Secretary Canada introduced Mr. Sam Chanoski, NERC Director of Situation Awareness and Event Analysis, who will be assuming the duties of CIPC Secretary following the September meeting. The agenda is attached as Exhibits A. Note: Slide presentations from this meeting are available at: Meeting Presentations. Acting Secretary Canada announced a quorum achieved with 28 of the 31 members present which includes the following proxies:

SPP – Doug Alexander representing John Breckenridge

WECC – Lisa Carrington representing vacancy left by Jamey Sample

CEA – Ron Gentle representing Francis Bradley Meeting Safety Briefing – JW Marriott staff

The JW Marriott security staff briefed CIPC attendees on general safety and evacuation procedures in the event of an emergency. Opening Remarks from Mr. Zeeshan Sheikh, VP, Chief Information Officer of Entergy

Mr. Sheikh welcomed attendees to New Orleans, and shared his thoughts on information sharing, human performance and strong corrective action programs. NERC Antitrust Compliance Guidelines

Acting Secretary Canada called attention to the NERC Antitrust Compliance Guidelines distributed with the agenda and made a statement concerning publicly announced meetings. Attendance

Chair Abell requested that all present in the meeting sign the attendance sheets; final recorded attendance was 146 CIPC members and guests. Consent Agenda

Meeting Minutes – Critical Infrastructure Protection Committee – September 15-16, 2015 2

Upon motion by Chair Abell to approve the Consent Agenda, including the posted CIPC Agenda for the June 9-10, 2015, meeting, the Consent Agenda was approved by CIPC without any corrections edits or modifications. CIPC Chair’s Report

Mr. Abell gave a report on recent CIPC activities, making particular mention of the first-ever dual cyber and physical training tracks offered at the September meeting. Several CIPC members expressed support of offering both a cyber and a physical security training opportunity at each meeting, and also the desire to hold these training opportunities at different times to allow members to attend both tracks. Mr. Abell mentioned the CIPC annual planning meeting taking place following the meeting, and encouraged members to speak with the CIPC Executive Committee if they have input. The CIPC leadership will be changing after the December meeting, and NERC support will be transitioning to the Reliability Risk Management department. Electricity Sector Information Sharing and Analysis Center (ES-ISAC) Update

Mr. Marc Sachs, NERC ES-ISAC, gave a brief history of ES-ISAC from its founding in 1997 up through the ESCC review concluded this summer. He outlined the ES-ISAC’s organization and staffing, the communications channels that they use to share information, and their governance structure. The new ES-ISAC Portal will be rolled out in the near future with enhanced sharing capabilities. CIPC Nominating Committee

Mr. Mike Mertz briefed the CIPC members on the activities of the Nominating Committee to develop a slate of nominees for CIPC Chair and two Vice-Chair positions. No additional candidates were nominated from the floor. Elections were conducted, and the following candidates were elected on the first ballot for a two-year term beginning January 1, 2016: as Chair, Mr. Marc Child; as Vice-Chairs, Mr. David Revill and Mr. Nathan Mitchell. Supply Chain Notice of Proposed Rulemaking

Mr. Shamain Elstein, NERC Legal and Regulatory, provided an update on the proposed rule currently open for public comment. Significant FERC outreach is expected during the deliberate consideration of the NOPR. Mr. Elstein noted that a technical conference is a possibility in the future, depending on the development of the topic, as NERC recognizes the need to educate itself and industry on the topic of supply chain security considerations. Development of Additional Guidance for CIP-014-1 Physical Security

Mr. Tobias Whitney, NERC Reliability Assurance, provided a status report on the development of additional guidance for CIP-014-1 requirements, highlighting the resources available for R1 compliance which starts October 1. Mr. Carl Herron, NERC Reliability Assurance, discussed some of the more technical details of the required assessments in CIP-014-1. CIP V5 Transition and CIP V5 Revisions

Mr. Tobias Whitney, NERC Reliability Assurance, gave an update on CIP V5 transition efforts, noting continuing efforts to resolve gray areas without creating bright-line guidance criteria. Guidance efforts continue to be focused on general communication and examples of compliance. Reliability Issues Steering Committee (RISC) Update

Meeting Minutes – Critical Infrastructure Protection Committee – September 15-16, 2015 3

Mr. Nathan Mitchell, American Public Power Association (APPA), briefed CIPC on the RISC’s Reliability Leadership Summit held in August 2015, at which cybersecurity was one of the main topics of discussion. The summit identified three categories of strategic risk: risks easily identified and measured; risks evolving quickly due to regulation, economics and technology; and risks with outsized potential impacts from extreme events and intentional acts. Regulatory uncertainty, resources, and resiliency were common themes at the summit. Legislative Update

Mr. Nathan Mitchell, APPA, provided an update on current legislation pending and contemplated in the U.S. House of Representatives and Senate. There are bills being discussed for both cybersecurity and information sharing, and also a comprehensive energy strategy.

Electricity Sub-sector Coordinating Council (ESCC) Update

Mr. Nathan Mitchell, APPA, gave an update on recent ESCC activities, which include processes to disseminate DHS products, supply chain security, outreach to other strategic sector CEO peers, and strengthening ES-ISAC capabilities. North American Transmission Forum (NATF) Security Practices Group Activity Update

Mr. Jim Rowan, NATF staff, gave an update on recent NATF activities, which include CIP-014-1 R4 and R5 guides, a joint resiliency project with the Electric Power Research institute (EPRI), and five security-related projects in progress. NATF plans to host a security conference in May 2016. The CIPC Meeting on September 15 concluded for the day at 5:10 p.m. (CDT) and reconvened on September 16 at 8:00 a.m. (CDT) DHS Substation Tabletop Exercise Package

Acting Secretary Canada shared information about a recently released DHS product that organizations can use to conduct a tailored, comprehensive, standalone tabletop exercise for substation security, from planning through after-action review. A limited number of DVDs with the DHS material were made available for CIPC attendees. Transformer Protection Design and Retrofit Enhancements

Mr. Craig Stiegemeier of ABB, Inc., gave an overview of some of ABB’s programs to harden large power transformers against physical attach. There are options for new transformers starting at the design phase as well as retrofits for existing transformers while maintaining all technical functionality. The hardening enhancements focus on coatings to the steel case, modular design to the cooling system and conservator tank to allow ballistic panels, and hardened dry bushings. North American SynchroPhasor Initiative (NASPI) Introduction of Studies

Ms. Alison Silverstein, NASPI Project Manager, briefed CIPC members on a 2014 NASPI survey on cybersecurity of Synchrophasor data networks. Several CIPC members commented that business needs must be considered and not only IT security considerations, and the importance of using design basis threat methodology to integrate security from the design phase. Operating Security Subcommittee – Chair Mr. Jim Brenton

Meeting Minutes – Critical Infrastructure Protection Committee – September 15-16, 2015 4

Grid Exercise Working Group (GEWG) Subcommittee Chair Mr. Jim Brenton, on behalf of GEWG Chair Mr. Tim Conway, provided an overview of the ways an organization can participate in GridEx III in November 2015, and encouraged participating organizations to reach out to their regional FBI Field Offices and Infragard coordinators, and state and regional fusion centers. A significant majority of CIPC attendee organizations are participating in GridEx III. Business Continuity Guideline Task Force (BCGTF) Subcommittee Chair Mr. Jim Brenton, on behalf of BCGTF Chair Mr. Darren Myers, reported that the guideline is currently in draft format. There was a discussion of opportunities to integrate Wireless Priority Service (WPS) and Government Emergency Telecommunications Service (GETS) into normal operations and business continuity plans.

Cybersecurity Subcommittee – Chair Mr. Marc Child

Mr. Child mentioned that with the completion of the Control Systems Electronic Connectivity Guideline, the Cybersecurity Subcommittee has the capacity to take on new projects, and members with ideas should bring them to the Subcommittee Chair.

Control Systems Security Working Group (CSSWG) CSSWG Chair Mr. Mikhail Falkovich reported that the Control Systems Electronic Connectivity Guideline is now complete, after consideration of over 100 comments. The guideline is expected to help further IT-OT interactions across industry as the recommendations are considered and implemented.

Security Training Working Group (STWG) STWG Chair Mr. William Whitney provided an overview of the monthly training opportunities for the remainder of 2015. Mr. Whitney asked for thoughts on having dual training tracks versus staggered training opportunities at future CIPC meetings; several members spoke in favor of having both cyber and physical security training opportunities available at different times each meeting. He requested recommendations for future training topics and volunteers to support these opportunities.

Physical Security Subcommittee – Chair Mr. David Grubbs

Physical Security Working Group (PSWG) PSWG Chair Mr. Ross Johnson reported that the PSWG has not met since the June CIPC meeting, mainly due to members’ work in support of the Physical Security Advisory Group (PSAG). Monthly roundtable conference calls are planned to resume later this fall after a planned break over the summer months. Physical Security Guidelines Task Force (PSGTF)

Mr. Doug Alexander, on behalf of PSGTF Chair Mr. John Breckenridge, reported that work continues on updating the Threat and Incident Reporting Security Guideline, with a targeted completion in the first half of 2016.

Meeting Minutes – Critical Infrastructure Protection Committee – September 15-16, 2015 5

Policy Subcommittee – Chair Mr. Nathan Mitchell (No Presentation)

Bulk Electric System Security Metrics Working Group (BESSMWG) BESSMWG Chair Roland Miller updated the CIPC on the group’s review of over 150 potential metrics for relevance and availability of data. Work continues on refining and gathering data for five initial metrics. Compliance Enforcement and Input Working Group (CEIWG) CEIWG Chair Mr. Paul Crist gave an update on the progress of CIP V5 Frequently Asked Questions products. Physical Security Standard Working Group (PSSWG) PSSWG Chair Mr. Allan Wick reported that the group finished work on the CIP-014-1 R6 guide last quarter, and are currently working on a roadmap for CIP-014-1 implementation.

Agency Updates

Department of Energy – Mr. Jim McGlone Mr. McGlone provided an update on DOE activities including the Electric Sector Specific Plan; the spare transformer report; the ESCC meeting at DOE in November; and the classified briefing during the December CIPC meeting in Atlanta, GA. The December CIPC briefing is expected to be classified to allow attendance from cleared Canadian stakeholders. Adjournment There being no further business, and upon motion to adjourn by Chair Abell, the CIPC adjourned on September 16 at 11:25 a.m. (CDT). Submitted by, Samuel D. Chanoski CIPC Secretary

Agenda Critical Infrastructure Protection Committee September 15, 2015 | 1:00–5:00 p.m. (CDT) September 16, 2015 | 8:00 a.m.–Noon (CDT)

JW Marriott New Orleans 614 Canal Street New Orleans, LA 70130 504-525-6500

Critical Infrastructure Protection Committee (CIPC) Workshop (Physical Security): Surveillance Detection and Countermeasures

Ile de France II and III (3rd Floor) September 15, 2015 | 8:00 a.m.–Noon (CDT)

CIPC Workshop (Cybersecurity): CIP Version 5 Vulnerability Assessment

Conde/Frontenac (3rd Floor) September 15, 2015 | 8:00 a.m.–Noon (CDT)

CIPC Meeting

CIPC Lunch | September 15, 2015 | Noon–1:00 p.m. (CDT) Prefunction Ile de France (3rd Floor) September 15, 2015 | 1:00 p.m.–5:00 p.m. (CDT) September 16, 2015 | 8:00 a.m.–Noon (CDT) Ile de France II and III (3rd Floor)

Introductions and Welcome – Mr. Chuck Abell, CIPC Chair, Ameren Services

NERC Antitrust Compliance Guidelines and Public Announcement – Mr. Bob Canada, NERC/E-ISAC

Agenda Items

1. Opening Remarks – Mr. Zeeshan Sheikh, VP, Chief Information Officer of Entergy

2. Administrative – Mr. Bob Canada, NERC/ES-ISAC

a. Safety Briefing and Emergency Precautions, JW Marriott Staff

b. Declaration of CIPC Quorum

c. CIPC Roster

d. Parliamentary Procedures – In the absence of specific provisions in the CIPC charter, thecommittee shall conduct its meetings guided by the most recent edition of Robert’s Rules ofOrder, Newly Revised.

Exhibit A

Agenda – Critical Infrastructure Protection Committee – September 15-16, 2015 2

3. Consent Agenda – Mr. Chuck Abell, CIPC Chair, Ameren Services

a. Draft June CIPC Minutes

b. Committee Membership Appointments and Changes: TRE David Grubbs City of Garland Operations TRE Jim Brenton ERCOT Cyber TRE Darrell Klimitcheck STEC Physical FRCC Paul McClay TECO Cyber FRCC Carter Manucy Fla Municipal Physical FRCC Joe Garmon Seminole Operations MRO Marc Child Great River Cyber MRO Paul Crist LES Physical MRO Joe Mayfield WAPA Operations NPCC John Galloway ISO-NE Operations NPCC Greg Goodrich NYISO Cyber NPCC David Cadregari Iberdrola USA Physical RFC Larry Bugh RFC Cyber RFC Kent Kujala Detroit Operations RFC Jeff Fuller DPL Physical SERC Chuck Abell Ameren Operations SERC Cynthia Hill-Watson TVA Cyber SERC Bruce Martin Duke Energy Physical SPP John Breckenridge KCPL Physical SPP Allen Klassen Westar Operations SPP Eric Ervin Westar Cyber WECC Allan Wick Tri-State Physical WECC Mike Mertz PNM Cyber WECC Vacant Operations APPA Scott Smith Bryan TX Utilities Physical APPA Nathan Mitchell APPA Policy CEA Francis Bradley CEA Physical CEA Ross Johnson Capital Power Physical CEA David Dunn IESO Policy NRECA Robert Richhart Hoosier Policy NRECA David Revill Georgia Trans Policy

4. Chair’s Remarks – Mr. Chuck Abell, CIPC Chair, Ameren Services

5. ES-ISAC Update – Mr. Marc Sachs, Senior Vice President and Chief Security Officer, NERC/ES-ISAC

6. Physical Security Group Update – Mr. Bob Canada, NERC/ES-ISAC

7. Supply Chain Notice of Proposed Rulemaking – Mr. Shamai Elstein, NERC/Legal and Regulatory

8. Update: Development of Additional Guidance for CIP-014-1. Physical Security – Mr. Tobias Whitney, NERC/Reliability Assurance

Agenda – Critical Infrastructure Protection Committee – September 15-16, 2015 3

9. Update: CIP V5 Transition and CIP V5 Revisions – Mr. Tobias Whitney, NERC/Reliability Assurance

10. Reliability Issues Steering Committee (RISC) Update and the Reliability Risk Control Process – Mr. Nathan Mitchell, CIPC Vice Chair and representative to RISC, American Public Power Association (APPA)

11. Legislative Update – Mr. Nathan Mitchell, CIPC Vice Chair, APPA

12. Electricity Subsector Coordinating Council Update – Mr. Nathan Mitchell, CIPC Vice Chair and representative to RISC, APPA

13. North American Transmission Forum (NATF) - Security Practices Group Activity Update – Mr. Jim Rowan, NATF

14. North American SynchroPhasor Initiative (NASPI), Introduction of Studies – Ms. Alison Silverstein, NASPI Project Manager

15. Operating Security Subcommittee – Mr. Jim Brenton, CIPC Vice Chair and Subcommittee Chair, ERCOT

a. Grid Exercise Working Group (GEWG) – Mr. Jim Brenton, CIPC Vice Chair and Subcommittee Chair, ERCOT, on behalf of Mr. Tim Conway, GEWG Chair, SANS, will report on GridEx III preparations for this year’s exercise.

GEWG Charter

b. Business Continuity Guideline Task Force (BCGTF) – Mr. Darren Myers, BCGTF Chair, Duke Energy, will report on GridEx II assignments to the BCGTF.

BCGTF Charter – approved by CIPC through email ballot on August 22, 2014.

16. Cybersecurity Subcommittee – Mr. Marc Child, Subcommittee Chair, Great River Energy

a. Control Systems Security Working Group (CSSWG) – Mr. Mikhail Falkovich, CSSWG Chair, PSEG, will provide an update on the status of the CSSWG’s Draft Control Systems Electronic Connectivity Guideline and follow-on activity.

CSSWG Charter – approved by CIPC through email ballot on August 18, 2014.

b. Security Training Working Group (STWG) – Mr. William Whitney III, STWG Chair, City of Garland Power and Light, will report on the STWG progress, scheduled training, and contemplated webinars.

c. STWG Charter

17. Physical Security Subcommittee – Mr. David Grubbs, Subcommittee Chair, City of Garland Power and Light

a. Physical Security Working Group (PSWG) – Mr. Ross Johnson, PSWG Chair, Capital Power will report on the progress of work completed and contemplated.

PSWG Charter

Agenda – Critical Infrastructure Protection Committee – September 15-16, 2015 4

b. Physical Security Guidelines Task Force (PSGTF) – Mr. Doug Alexander, Kansas City Power and Light, on behalf of John Breckenridge, PSGTF Chair, Kansas City Power and Light, will report on updates to the Threat and Incident Reporting Security Guideline.

PSGTF Charter

Electricity Sector: Physical Security Response Guideline

18. Policy Subcommittee – Mr. Nathan Mitchell, CIPC Vice Chair, APPA

a. Bulk Electric System Security Metrics Working Group (BESSMWG) – Mr. Roland Miller, BESSMWG Chair, NextEra Energy, will report on the progress of work completed and contemplated.

BESSMWG Charter

State of Reliability 2015

b. Compliance Enforcement and Input Working Group (CEIWG) – Mr. Paul Crist, CEIWG Chair, Lincoln Electric System, will report on the progress of the work completed and contemplated.

CEIWG Charter

c. Physical Security Standard Working Group (PSSWG) – Mr. Allan Wick, PSSWG Chair, Tri-State G&T, will report on the progress of the work completed and contemplated.

PSSWG Charter - approved by CIPC through email ballot on February 9, 2015.

Critical Infrastructure Protection Committee Security Guideline for the Electricity Subsector Reliability Standard CIP-014 (Physical Security), Requirement R6 Practices Guide – approved by CIPC through email ballot on June 22; submitted to industry for comment through August 10.

19. Agency Updates

a. Federal Energy Regulatory Commission – Mr. David Norton

b. Department of Energy – Mr. Jim McGlone

20. Schedule of Important Dates:

Dates Time Type Location Hotel

September 15, 2015 8:00 a.m.–Noon Physical Security CIPC Workshop

New Orleans, LA

JW Marriott New Orleans

614 Canal Street

New Orleans, LA 70130

(504) 525-6500

September 15, 2015 Noon–5:00 p.m. CIPC Meeting

New Orleans, LA JW Marriott New Orleans

614 Canal Street

New Orleans, LA 70130

(504) 525-6500

September 16, 2015 8:00 a.m.–Noon CIPC Meeting

New Orleans, LA JW Marriott New Orleans

614 Canal Street

New Orleans, LA 70130

(504) 525-6500

September 16, 2015 September 17, 2015

Noon–5:00 p.m. 8:00 a.m.–Noon

CIPC Executive Committee Annual Planning Meeting

New Orleans, LA JW Marriott New Orleans

614 Canal Street

New Orleans, LA 70130

(504) 525-6500

Agenda – Critical Infrastructure Protection Committee – September 15-16, 2015 5

Dates Time Type Location Hotel

October 13-16, 2015 8:00 a.m.–5:00 p.m. GridSecCon 2015 Philadelphia, PA

Hyatt Regency Philadelphia at Penn’s Landing

201 South Columbus Boulevard

Philadelphia, PA 19106 (215) 521-6553

November 18-19, 2015 8:00 a.m.–5:00 p.m. GridEx III Remote Play NA

December 15, 2015 8:00 a.m.–Noon DHS/DOE Energy Sector

Classified Briefing (No CIPC Workshop)

TBD

FBI Training Room, 3rd floor FBI Atlanta

2635 Century Parkway, N.E. Atlanta, GA 30345

December 15, 2015 Noon–5:00 p.m. CIPC Meeting Atlanta, GA

Westin Buckhead Hotel 3391 Peachtree Rd N.E.

Atlanta, GA 30326 (404) 365-0065

December 16, 2015 8:00 a.m.–Noon CIPC Meeting Atlanta, GA

Westin Buckhead Hotel 3391 Peachtree Rd N.E.

Atlanta, GA 30326 (404) 365-0065

March 8, 2016 8:00 a.m.–Noon CIPC Workshop TBD TBD

March 8, 2016 Noon–5:00 p.m. CIPC Meeting TBD TBD

March 9, 2016 8:00 a.m.–Noon CIPC Meeting TBD TBD

June 7, 2016 8:00 a.m.–Noon CIPC Workshop TBD TBD

June 7, 2016 Noon–5:00 p.m. CIPC Meeting TBD TBD

June 8, 2016 8:00 a.m.–Noon CIPC Meeting TBD TBD

21. Closing Remarks and Action Items

22. Adjournment