170 likes | 264 Views
Critical Infrastructure Protection Committee Report to NERC Standing Committees in Joint Session. Long Beach, CA March 2005. Public Release. Topics. Cyber Security Standard CIP-001-009 Larry Bugh Government – Private Sector coordination Pat Laird
E N D
Critical Infrastructure Protection Committee Report toNERC Standing Committeesin Joint Session Long Beach, CA March 2005 Public Release
Topics • Cyber Security Standard CIP-001-009 Larry Bugh • Government – Private Sector coordination Pat Laird • National Infrastructure Protection Plan Jim McGlone • National Response Plan Jim McGlone • Electricity Sector Info Sharing Analysis Center Lou Leffler
Cyber Security Standard CIP-001-009 • 61 sets of comments on Draft 2 • DT met Mar. 3/4 to review • 2 Tech Editors now on board • DT meets again Mar. 21/22 • Review total package • Finalize Draft 3 • Finalize draft 2 Implementation Plan
Cyber Security Standard CIP-001-009 • Major Areas of work • Refine definitions • Resolve consistency • Match Requirements & measures • Extend Implementation Plan • Anticipate posting Draft 3 Apr. 15th
Government – Private Sector Coordination • Homeland Security Presidential Directive – 7 • Department of Homeland Security • Sector Specific Agencies • Energy: Department of Energy • Private Sectors • National Infrastructure Protection Plan (Work in process)
Electricity Sector Coordinating Council • CIP Committee Executive Committee • President / CEO NERC • Presented to DHS; awaiting expected affirmation
National Infrastructure Protection PlanNIPP Jim McGlone Department of Energy
National Response PlanNRP Jim McGlone Department of Energy
Communications • Threat Advisory Listserv (TAL) • Critical Infrastructure Protection Information System (CIPIS) • Homeland Security Information Network (under development) • US-CERT Portal • Telephone and conference calls • GETS
REPORT INCIDENTS TO 1. LOCAL LAW ENFORCEMENT (Establish and maintain relationship.) 2. LOCAL FBI, PSEPC, RCMP, USSS (Establish and maintain relationship.) 3. ESISAC secure messaging: https://www.nerc.net/cip email: esisac@nerc.com tel: 609-452-1422 (anytime) fax: 609-452-9550 (day) 4. National Infrastructure Coordination Center (DHS IAIP) secure messaging: https://www.nerc.net/cip email: nicc@dhs.gov tel: 202-282-9201 fax: 703-487-3570 14
Reports: • From the ES, • Together with other critical infrastructures, • And intelligence sources: May help the DHS to:
Some Things to Think About • Does the ESISAC have your 24x7 contact? Are there multiple contact points and communications available? • Is a security decision-making process in place? • How will your organization’s physical and cyber security decision-makers get notified? Are there backup communications? • Is there a means in place to communicate decisions to action-takers? A backup? • Consider responses in accordance with the “Threat Alert Systems and Physical / Cyber Response Guidelines for the Electricity Sector”.
Activities • Back Up Location for ESISAC • Telecommunications Electric Service Priority (TESP) program • TopOff – 3 TY