Security Guidelines Working Group Update

1
Security Guidelines Working Group Update
Public Release

• CIPC Meeting
• Denver CO
• September 29, 2005
• Seiki Harada
• SGWG Chair

2
(No Transcript)
3
Working Group Name Change

• The CIPC meeting of 2005 June precluded
  standard documents from the review
  responsibility of SGWG.
• Based on this, in May 17, CIPC endorsed dropping
  S from SGWG, and make it GWG.
• The working group had a second thought about the
  abbreviation. We now seek approval to keep the
  SGWG abbreviation and interpret the first
  character as Security.

4
SGWG Membership Renewal

• The Issue
• There are 23 names on the current SGWG roster
• NERC meeting procedure requires
• a quorum of 2/3 of the registered member
• 2/3 majority for a decision making
• In any of the SGWG meetings in the past, we were
  not able to attain the quorum

5
SGWG Membership Renewal

• The Proposal
• Voting Members
• 6 8 members representing Operations, Cyber
  Security, Physical Security.
• Non-voting contributors

6
CIPC Document Review Process

• Discussion Points
• In the June 2005 CIPC meeting, a process flow
  diagram for SGWG document review was endorsed
  (see next foil).
• CIPC still needed a higher level process of which
  the SGWG process is a part. We propose such a
  process for approval.

7
CIPC Document Review Process
8
Security Guideline Process Flow
Origin- ator
CIPC EXEC
WG or TF
SGWG
CIPC
CIPC
NERC Board
CIPC EXEC

• Need

• Approve

• Review

• Prioritize
• Owner
• Sponsor
• Resources
• Scope

• Draft
• Content
• Expertise
• Iterate w/Industry

• Format
• Consistency
• Terminology

• Distribute
• Train
• Cycle

• Review
• Adopt

• Track Guideline Status and Progress
• Post for Final Review
• Facilitate Vote
• Initiate Review on 2 Year Cycle

NERC Staff
9
Updated Guideline DRAFT
Agenda

• Discussion and approval of the combined
  guidelines, Threat Alert System and Physical
  Response Version 2.1
• This guideline is a combination of
• Threat Alert System and Physical Response
  Guidelines for the Electric Sector Version 2.0
• Threat Response Version 2.0

10
SGWG Objectives for 2005
11
Status of Document Reviews

• Refer to the Word document
• Guideline Review Status
• Discussion Points
• Reviewed 10 guidelines in March 2005
• 5 more reviewed by Sep 2005
• All of guidelines over 12 months are reviewed
  now.
• Assignments for drafting new versions and reviews
  of the new versions to follow.

12
Succession Plan SGWG Chair

• Discussion Points
• The incumbent is packing it in, in six months
• Preferred transition target 2006 January
• Any volunteers?