CIP-010 and CIP-011Current Status

ReliabilityFirst CIP Webinar

Thursday, June 22, 2010

Mike Ketchens

06/22/10

TimelineProject 2008-06-Cyber Security Order 706 Phase II

Standard Drafting Team requested industry feedback on the initial drafts – due 6/3/2010.

ReliabilityFirst CIP Team provided feedback.

Drafting team met with FERC Staff members on May 27, 2010 to solicit their feedback.

Drafting team is currently utilizing the feedback received to refine the draft and hopes to put it out for formal review in July/August 2010.

Items of Special Note

CIP-010 and CIP-011 Eliminate Critical Asset and Critical Cyber Asset

terms

Introduce new terms and definitionsBES Cyber System ComponentBES Cyber SystemControl Center

Highlights of Changes

CIP-010• Replaces CIP-002

• Has three (3) Requirements and three (3) sub-requirements

• Classification of BES Cyber Systems as Low, Medium, or High based on categorization of impact on BES

Highlights of Changes

CIP-011• Replaces CIP-003 through CIP-009

• Has thirty two requirements and thirty two tables each similar in format to a sub requirement

• Implements a catalogue of controls based on impact of BES Cyber Systems as identified in CIP-010

QUESTIONS

Questions should be emailed to Matt Thomas (matt.thomas@rfirst.org), Subject: “CIP WEBINAR”

Questions will considered in the order they are received

Clarifying questions are welcome and we’ll do our best to answer during the question period

Challenges to a position should be addressed to the presenter and will be taken offline