Skip Ribbon Commands
Skip to main content
Newsroom

 

 

RF, SERC, and WECC to Issue Joint Report on CIP Themeshttps://www.rfirst.org/rf-and-wecc-to-issue-joint-report-on-cip-themesRF, SERC, and WECC to Issue Joint Report on CIP Themes<font color="#000000" face="Times New Roman" size="3"> </font><p style="text-align:justify;">To combat the ever changing physical and cyber-threats landscape, entities continue to improve their tools, expertise, and defense strategies. Yet, despite these efforts to stay ahead of security threats, entities are sometimes held back by deficiencies or limitations in their corporate structure, culture, or resources.</p><div style="text-align:justify;"><font color="#000000" face="Times New Roman" size="3"> </font><font color="#000000" face="Times New Roman" size="3"> </font></div><p style="text-align:justify;">In 2014, RF, in coordination with NERC and several stakeholders, began analyzing data around potential themes in these deficiencies and limitations and released its findings in early 2015 in the first edition of the CIP themes report. Now, RF, SERC, and WECC have been working together to analyze the data in the three Regions around potential themes. The Regions handle large volumes of noncompliance and their territories cover a large part of the United States and parts of Canada and Mexico. This collaboration has helped identify new areas for improvement and potential resolutions to some of the deficiencies and allowed for validation of the data in each Region.</p><div style="text-align:justify;"><font color="#000000" face="Times New Roman" size="3"> </font><font color="#000000" face="Times New Roman" size="3"> </font></div><p style="text-align:justify;">RF, SERC, and WECC, in coordination with NERC and several stakeholders from the three Regions, plan to issue a joint report in early 2018 in order to help drive entities to continue to assess and strengthen their CIP programs and thus mitigate security risks.</p><font color="#000000" face="Times New Roman" size="3"> </font>aspx0x010100C568DB52D9D0A14D9B2FDCC96666E9F2007948130EC3DB064584E219954237AF3900242457EFB8B24247815D688C526CD44D0093A70D41E916EA45B5172B8FDD4B3EFA00F578CE634144CA46817471FA34146B93
RF Participates in GridEx IVhttps://www.rfirst.org/rf-participates-in-gridex-iv-(2)RF Participates in GridEx IV<font color="#000000" face="Times New Roman" size="3"> </font><p style="text-align:justify;">Since 2011, NERC has hosted a biennial Grid Exercise for industry and government organizations throughout North America. Set up as a tabletop simulation, organizations have the opportunity to demonstrate how they would respond to severe cyber and physical security threats.</p><p style="text-align:justify;"> </p><p style="text-align:justify;">These Grid Exercises are created to determine where improvements need to be made in response plans in an exciting and interactive way that does not involve any sort of compliance action.</p><p style="text-align:justify;"> </p><p style="text-align:justify;">GridEx IV was designed to challenge utilities and to really test the friction points. The 2015 cyber-attack in Ukraine, as well as the recent spreading of “Fake News” across social media, were key influencers for creating this year's simulation. More than 6,500 participants from 450 industry agencies and organizations participated in this year's Grid Exercise. Participants include the utilities, RTO’s, Regions, the Department of Energy, Department of Homeland Security, FBI, and Department of Defense. While some participants actively responded to events, others simply observed the exercise.</p><p style="text-align:justify;"> </p><p style="text-align:justify;">RF has been participating since the onset of GridEx, and enjoyed the unique challenges of GridEx IV. Representatives from RF participated on the GridEx Working Group in developing the scenario for GridEx IV. Once the master scenario was annualized, RF developed injects (simulated events) specific to RF resources, including our IT Infrastructure and our corporate communications capabilities.</p><p style="text-align:justify;"> </p><p style="text-align:justify;">The purpose of these custom injects was to test recently improved internal processes and procedures related to Event Analysis, Situation Awareness, Incident Identification and Response, and Emergency Communications. Throughout the 2-day exercise, RF staff collaborated with participating staff from NERC, our RTOs, and Registered Entities to understand how the scenario was unfolding and what our entities were experiencing as a result of the exercise. We were also able to identify how RF could assist our entities’ response to the scenario.</p><p style="text-align:justify;"> </p><p style="text-align:justify;">Going forward, RF will participate in NERC-led discussions to capture lessons learned across the ERO and will incorporate those lessons learned, as well as our own internal lessons learned into continuing to improve our internal processes and procedures.</p><p style="text-align:justify;"> </p><p style="text-align:justify;">We will continue to work with others within the ERO to improve communications between and among NERC, the Regional Entities and the Registered Entities so we are all better prepared should a real event of the magnitude simulated in GridEx IV occur.</p><font color="#000000" face="Times New Roman" size="3"> </font>aspx0x010100C568DB52D9D0A14D9B2FDCC96666E9F2007948130EC3DB064584E219954237AF3900242457EFB8B24247815D688C526CD44D0093A70D41E916EA45B5172B8FDD4B3EFA00F578CE634144CA46817471FA34146B93
RF Issues Winter Readiness Best Practices/Lessons Learnedhttps://www.rfirst.org/rf-issues-winter-readiness-best-practices-lessons-learnedRF Issues Winter Readiness Best Practices/Lessons Learned<font color="#000000" face="Times New Roman" size="3"> </font><p style="text-align:justify;"><span class="ms-rteFontSize-2">RF has developed a collaborative process to look at winter readiness across our Region and share Best Practices and Lessons Learned across the ERO.  We use risk-based criteria to select entities to participate in the winter preparation process. Survey responses are evaluated and any additional requests for information (RFIs) are developed, as needed, to gain a better understanding of an entity's level of cold weather readiness and mitigation of previous cold weather related issues. </span></p><div style="text-align:justify;"><font class="ms-rteFontSize-2" color="#000000" face="Times New Roman"> </font><font class="ms-rteFontSize-2" color="#000000" face="Times New Roman"> </font></div><p style="text-align:justify;"><span class="ms-rteFontSize-2">If a generating facility is selected for an onsite visit, items for discussion and spot check are listed on the meeting agenda, which allows the entity to collect the necessary information and arrange for SME participation. Any Best Practices and Lessons Learned observed during the site visit are reviewed and discussed with the plant staff.</span></p><div style="text-align:justify;"><font class="ms-rteFontSize-2" color="#000000" face="Times New Roman"> </font><font class="ms-rteFontSize-2" color="#000000" face="Times New Roman"> </font></div><p style="text-align:justify;"><span class="ms-rteFontSize-2">RF recently issued a </span><a href="/KnowledgeCenter/Risk%20Analysis/ColdWeather/KC%20%20Risk%20Analysis%20%20Cold%20Weather%20Preparedness%20Libra/2014-2017%20Winterization%20Visit%20Best%20Practices.pdf"><span class="ms-rteFontSize-2">revised Best Practices/Lessons Learned presentation</span></a><span class="ms-rteFontSize-2">. This presentation encompasses not only items identified during the recent winter preparation process, but areas from previous plant visits and those recognized by other Regions. As you will see in the Best Practices/Lessons Learned, although the occurrence of frozen critical transmitters appears to be lessening, freezing and/or icing of combustion turbine inlet air filters appears to be a continual problem causing trips or de-rates.</span></p><font color="#000000" face="Times New Roman" size="3"> </font>aspx0x010100C568DB52D9D0A14D9B2FDCC96666E9F2007948130EC3DB064584E219954237AF3900242457EFB8B24247815D688C526CD44D0093A70D41E916EA45B5172B8FDD4B3EFA00F578CE634144CA46817471FA34146B93

 Contact Info

​ReliabilityFirst Corporation
3 Summit Park Drive, Suite 600
Cleveland, OH 44131

p. (216) 503-0600
f.  (216) 503-9207

Normal Business Hours:
8am - 5pm EST
Monday through Friday