CIPC Executive Committee Update

1
CIPC Executive Committee Update
CIPC Confidentiality Public Release

• CIPC Meeting
• Mesa AZ
• March 16, 2006
• Barry Lawson
• CIPC Vice-Chair

2
CIPC Executive Committee Activities

• Participated in Jan 19/06 PCIS meeting
• Discussed issues re draft NIPP with new DHS
  Under Secretary George Foresman
• Frank and open discussion re issues such as
  National Asset Data Base, risk assessment
  methodology, need for flexibility within each
  sector
• General sense that DHS is listening to private
  sector concerns, and that NIPP will be moderated
  somewhat from previous versions

3
CIPC Executive Committee Activities

• NIPP-related actions
• Asked Risk Assessment WG to assess CIPC risk
  assessment methodologies for suitability against
  NIPP criteria (ref. Risk Assessment Methodologies
  for Use by the Electricity Sector)
• Successful discussions with DOE re private
  sector concerns, hopefully will be addressed in
  Sector-Specific Plan
• Final NIPP expected May 1
• Sector-Specific Plans expected 6 months later

4
CIPC Executive Committee Activities

• Plan to meet with Government Coordinating Council
  (GCC) late April/early May
• Discuss how best to contribute to DOEs
  development of the Sector-Specific Plan
• Briefing by DHS of HITRACs Electricity sector
  threat assessment, will determine value of
  briefing at June CIPC meeting
• Discuss ESCC-GCC role with Roadmap to Secure
  Control Systems in the Energy Sector
• Review process to change current ES threat level,
  and consider lowering from Yellow to Blue for the
  electricity sector
• Develop electricity sector goals and metrics

5
CIPC Executive Committee Activities

• Confidentiality and information-sharing
• PCII policy document near-final development by
  DHS legal counsel expected to be released in
  reasonably near future
• FACA issues for PCIS and SCC/GCCs under final
  review. Recommendation expected soon by DHS
  Secretary