80 FR 81534 - Revised Critical Infrastructure Protection Reliability Standards; Supplemental Notice of Agenda and Discussion Topics for Staff Technical Conference
DEPARTMENT OF ENERGY
Federal Energy Regulatory Commission Federal Register Volume 80, Issue 250 (December 30, 2015)
Federal Energy Regulatory Commission
Federal Register Volume 80, Issue 250 (December 30, 2015)
| Page Range | 81534-81536 | |
| FR Document | 2015-32833 |
[Federal Register Volume 80, Number 250 (Wednesday, December 30, 2015)] [Notices] [Pages 81534-81536] From the Federal Register Online [www.thefederalregister.org] [FR Doc No: 2015-32833] ----------------------------------------------------------------------- DEPARTMENT OF ENERGY Federal Energy Regulatory Commission [Docket No. RM15-14-000] Revised Critical Infrastructure Protection Reliability Standards; Supplemental Notice of Agenda and Discussion Topics for Staff Technical Conference This notice establishes the agenda and topics for discussion at the technical conference to be held on January 28, 2016, to discuss issues related to supply chain risk management. The technical conference will start at 10:00 a.m. and end at approximately 4:30 p.m. (Eastern Time) in the Commission Meeting Room at the Commission's Headquarters, 888 First Street NE., Washington, DC. The technical conference will be led by Commission staff, and FERC Commissioners may be in attendance. All interested parties are invited to attend, and registration is not required. The topics and related questions to be discussed during this conference are provided as an attachment to this Notice. The purpose of the technical conference is to facilitate a structured dialogue on supply chain risk management issues identified by the Commission in the Revised Critical Infrastructure Protection Standards Notice of Proposed Rulemaking (NOPR) issued in this proceeding and raised in public comments to the NOPR. Prepared remarks will be presented by invited panelists. This event will be webcast and transcribed. The free webcast allows listening only. Anyone with Internet access who desires to listen to this event can do so by navigating to the ``FERC Calendar'' at www.ferc.gov, and locating the technical conference in the Calendar of Events. Opening the technical conference in the Calendar of Events will reveal a link to its webcast. The Capitol Connection provides technical support for the webcast and offers the option of listening to the meeting via phone-bridge for a fee. If you have any questions, visit www.CapitolConnection.org or call 703-993-3100. The webcast will be available on the Calendar of Events at www.ferc.gov for three months after the conference. Transcripts of the conference will be immediately available for a fee from Ace-Federal Reporters, Inc. (202-347-3700). FERC conferences are accessible under section 508 of the Rehabilitation Act of 1973. For accessibility accommodations, please send an email to accessibility@ferc.gov or call toll free (866) 208- 3372 (voice) or (202) 502-8659 (TTY), or send a fax to (202) 208-2106 with the requested accommodations. There is no fee for attendance. However, members of the public are encouraged to preregister online at: https://www.ferc.gov/whats-new/registration/01-28-16-form.asp. For more information about the technical conference, please contact: Sarah McKinley, Office of External Affairs, 202-502-8368, sarah.mckinley@ferc.gov. Dated: December 23, 2015. Nathaniel J. Davis, Sr., Deputy Secretary. [[Page 81535]] [GRAPHIC] [TIFF OMITTED] TN30DE15.000 Critical Infrastructure Protection Supply Chain Risk Management RM15- 14-000 January 28, 2016 Agenda Welcome and Opening Remarks by Commission Staff 9:30-9:45 a.m. Introduction In a July 16, 2015 Notice of Proposed Rulemaking (NOPR) in the above-captioned docket, the Commission proposed to direct the North American Electric Reliability Corporation (NERC) to develop new or modified Critical Infrastructure Protection (CIP) Reliability Standards to provide security controls relating to supply chain risk management for industrial control system hardware, software, and services. The Commission sought and received comments on this proposal, including: (1) The NOPR proposal to direct that NERC develop a Reliability Standard to address supply chain risk management; (2) the anticipated features of, and requirements that should be included in, such a standard; and (3) a reasonable timeframe for development of a standard. The purpose of this conference is to clarify issues, share information, and determine the proper response to address security control and supply chain risk management concerns. Staff Presentation: Supply Chain Efforts by Certain Other Federal Agencies 9:45 a.m.-10:05 a.m. Break 10:05 p.m.-10:15 p.m. Panel 1: Need for a New or Modified Reliability Standard 10:15 a.m.-11:45 a.m. The Commission staff seeks information about the need for a new or modified Reliability Standard to manage supply chain risks for industrial control system hardware, software, and computing and networking services associated with bulk electric system operations. Panelists are encouraged to address:Identify challenges faced in managing supply chain risk. Describe how the current CIP Standards provide supply chain risk management controls. Describe how the current CIP Standards incentivize or inhibit the introduction of more secure technology. Identify possible other approaches that the Commission can take to mitigate supply chain risks. Panelists 1. Nadya Bartol, Vice President, Industry Affairs and Cybersecurity Strategist, UTC 2. Jon Boyens, Project Manager, Information Communication Technology (ICT) Supply Chain Risk Management, National Institute of Standards & Technology (NIST) 3. John Galloway, Director, Cyber Security, ISO New England 4. John Goode, Chief Information Officer/Senior Vice President, Midcontinent Independent System Operator (MISO) 5. Barry Lawson, Associate Director, Power Delivery & Reliability, National Rural Electric Cooperative Association (NRECA) 6. Helen Nalley, Compliance Director, Southern Company 7. Jacob Olcott, Vice President of Business Development, Bitsight Tech 8. Marcus Sachs, Senior Vice President and Chief Security Officer, North American Electric Reliability Corporation (NERC) Lunch 11:45 a.m.-1:00 p.m. Panel 2: Scope and Implementation of a New or Modified Standard 1:00 p.m.-2:30 p.m. The Commission staff seeks information about the scope and implementation of a new or modified Standard to manage supply chain risks for industrial control system hardware, software, and computing and networking services associated with bulk electric system operations. Panelists are encouraged to address: Identify types of assets that could be better protected with a new or modified Standard. Identify supply chain processes that could be better protected by a Standard. Identify controls or modifications that could be included in the Standard. Identify existing mandatory or voluntary standards or security guidelines that could form the basis of the Standard. Address how the verification of supply chain risk mitigation could be measured, benchmarked and/or audited. Present and justify a reasonable timeframe for development and implementation of a Standard. Discuss whether a Standard could be a catalyst for technical innovation and market competition. Panelists 1. Mike Ahmadi, Global Director--Critical Systems Security, Synopsys 2. Jonathan Appelbaum, Director, NERC Compliance, The United Illuminating Company 3. Brent Castegnetto, Manager, Cyber Security Audits & Investigations, WECC 4. Art Conklin, Ph.D., Associate Professor and Director of the Center for Information Security Research and Education, University of Houston 5. Edna Conway, Chief Security Officer, Value Chain Security, Cisco 6. Bryan Owen, Principal Cyber Security Manager, OSIsoft 7. Albert Ruocco, Vice President and Chief Technology Officer, American Electric Power (AEP) 8. Doug Thomas, Vice President and Chief Information Officer, Ontario Independent Electricity System Operation (IESO) Break 2:30 p.m.-2:45 p.m. Panel 3: Current Supply Chain Risk Management Practices and Collaborative Efforts 2:45 p.m.-4:15 p.m. The Commission staff seeks information about existing supply chain risk management efforts for information and communications technology and industrial control system hardware, software, and services in other critical infrastructure sectors and the government. Panelists are encouraged to address: Generally describe how registered entities and other organizations currently manage supply chain issues. Identify standards or guidelines that are used to establish supply chain risk management practices. Specifically, discuss experience under those standards or guidelines. Identify organizational roles involved in the development and implementation of supply chain risk management practices. Generally describe approaches for identifying, evaluating, mitigating, and monitoring supply chain risk. Generally discuss how supply chain risk is addressed in the contracting process with vendors and suppliers. [[Page 81536]] Generally describe the capabilities that registered entities currently have to inspect third party information security practices. Generally describe the capabilities that registered entities currently have to negotiate for additional security in their hardware, software, and service contracts. Describe how this may vary based on the potential vendor or supplier and the type of service to be provided. Generally describe how vendors and suppliers are managing risk in their supply chain. Panelists 1. Douglas Bauder, Vice President, Operational Services, and Chief Procurement Officer, Southern California Edison 2. Andrew Bochman, Senior Cyber & Energy Security Strategist, INL/DOE 3. Dennis Gammel, Director, Security Technology, Schweitzer Engineering 4. Andrew Ginter, Vice President, Industrial Security, Waterfall Security Solutions 5. Steve Griffith, Industry Director, National Electrical Manufacturers Association (NEMA) 6. Maria Jenks, Vice President, Supply Chain, Kansas City Power & Light (KCP&L) 7. Robert McClanahan, Vice President/Chief Information Officer, Arkansas Electric Cooperative Corporation (AECC) 8. Thomas O'Brien, Chief Information Officer, PJM Interconnection, LLC 4:15 p.m.-4:30 p.m. Closing Remarks [FR Doc. 2015-32833 Filed 12-29-15; 8:45 am] BILLING CODE 6717-01-P
![81534 Federal Register / Vol. 80, No. 250 / Wednesday, December 30, 2015 / Notices
Ulmer at least seven days in advance of Filed Date: 12/23/15. Commission staff, and FERC
the meeting at the phone number listed Accession Number: 20151223–5161. Commissioners may be in attendance.
above. Written statements may be filed Comments Due: 5 p.m. ET 1/13/16. All interested parties are invited to
with the Board either before or after the Docket Numbers: ER16–633–000. attend, and registration is not required.
meeting. Individuals who wish to make Applicants: California Independent The topics and related questions to be
oral presentations pertaining to agenda System Operator Corporation. discussed during this conference are
items should contact Barbara Ulmer at Description: Section 205(d) Rate
provided as an attachment to this
the telephone number listed above. The Filing: 2015–12–23 ABAOA with
Notice. The purpose of the technical
request must be received five days prior CENACE–GCRBC, Termination of CFE
conference is to facilitate a structured
to the meeting and reasonable provision ICAOA & Waiver Request to be effective
dialogue on supply chain risk
will be made to include the presentation 1/1/2016.
Filed Date: 12/23/15. management issues identified by the
in the agenda. The Deputy Designated Commission in the Revised Critical
Federal Officer is empowered to Accession Number: 20151223–5207.
Comments Due: 5 p.m. ET 1/13/16. Infrastructure Protection Standards
conduct the meeting in a fashion that
The filings are accessible in the Notice of Proposed Rulemaking (NOPR)
will facilitate the orderly conduct of
Commission’s eLibrary system by issued in this proceeding and raised in
business. Individuals wishing to make
clicking on the links or querying the public comments to the NOPR. Prepared
public comments can do so during the
docket number. remarks will be presented by invited
15 minutes allotted for public
Any person desiring to intervene or panelists.
comments.
Minutes: Minutes will be available by protest in any of the above proceedings This event will be webcast and
writing to Barbara Ulmer at the address must file in accordance with Rules 211 transcribed. The free webcast allows
listed above or at the following Web and 214 of the Commission’s listening only. Anyone with Internet
site: http://nv.energy.gov/nssab/ Regulations (18 CFR 385.211 and access who desires to listen to this event
MeetingMinutes.aspx 385.214) on or before 5:00 p.m. Eastern can do so by navigating to the ‘‘FERC
Issued at Washington, DC, on December 23, time on the specified comment date. Calendar’’ at www.ferc.gov, and locating
2015. Protests may be considered, but the technical conference in the Calendar
LaTanya R. Butler, intervention is necessary to become a of Events. Opening the technical
Deputy Committee Management Officer.
party to the proceeding. conference in the Calendar of Events
eFiling is encouraged. More detailed will reveal a link to its webcast. The
[FR Doc. 2015–32882 Filed 12–29–15; 8:45 am]
information relating to filing Capitol Connection provides technical
BILLING CODE 6450–01–P
requirements, interventions, protests, support for the webcast and offers the
service, and qualifying facilities filings option of listening to the meeting via
DEPARTMENT OF ENERGY can be found at: http://www.ferc.gov/ phone-bridge for a fee. If you have any
docs-filing/efiling/filing-req.pdf. For questions, visit
Federal Energy Regulatory other information, call (866) 208–3676 www.CapitolConnection.org or call 703–
Commission (toll free). For TTY, call (202) 502–8659. 993–3100. The webcast will be available
Dated: December 23, 2015. on the Calendar of Events at
Combined Notice of Filings #2 Nathaniel J. Davis, Sr., www.ferc.gov for three months after the
Deputy Secretary. conference. Transcripts of the
Take notice that the Commission
conference will be immediately
received the following electric rate [FR Doc. 2015–32828 Filed 12–29–15; 8:45 am]
available for a fee from Ace-Federal
filings: BILLING CODE 6717–01–P
Reporters, Inc. (202–347–3700).
Docket Numbers: ER14–2884–002.
Applicants: Kansas City Power & FERC conferences are accessible
Light Company, KCP&L Greater DEPARTMENT OF ENERGY under section 508 of the Rehabilitation
Missouri Operations Company. Act of 1973. For accessibility
Description: Compliance filing: Federal Energy Regulatory accommodations, please send an email
Protocols Compliance Filing to be Commission to accessibility@ferc.gov or call toll free
effective 3/1/2015. [Docket No. RM15–14–000] (866) 208–3372 (voice) or (202) 502–
Filed Date: 12/23/15. 8659 (TTY), or send a fax to (202) 208–
Accession Number: 20151223–5163. Revised Critical Infrastructure 2106 with the requested
Comments Due: 5 p.m. ET 1/13/16. Protection Reliability Standards; accommodations.
Docket Numbers: ER16–631–000. Supplemental Notice of Agenda and There is no fee for attendance.
Applicants: PacifiCorp. Discussion Topics for Staff Technical
Description: Section 205(d) Rate However, members of the public are
Conference encouraged to preregister online at:
Filing: BPA Construction Agmt (USBR
Green Springs Rev 1) to be effective This notice establishes the agenda and https://www.ferc.gov/whats-new/
2/22/2016. topics for discussion at the technical registration/01-28-16-form.asp.
Filed Date: 12/23/15. conference to be held on January 28, For more information about the
Accession Number: 20151223–5151. 2016, to discuss issues related to supply technical conference, please contact:
Comments Due: 5 p.m. ET 1/13/16. chain risk management. The technical Sarah McKinley, Office of External
Docket Numbers: ER16–632–000. conference will start at 10:00 a.m. and Affairs, 202–502–8368, sarah.mckinley@
mstockstill on DSK4VPTVN1PROD with NOTICES
Applicants: Blythe Solar II, LLC. end at approximately 4:30 p.m. (Eastern ferc.gov.
Description: Baseline eTariff Filing: Time) in the Commission Meeting Room
Blythe Solar II, LLC Application for at the Commission’s Headquarters, 888 Dated: December 23, 2015.
Market-Based Rates to be effective First Street NE., Washington, DC. The Nathaniel J. Davis, Sr.,
4/1/2016. technical conference will be led by Deputy Secretary.
VerDate Sep<11>2014 17:59 Dec 29, 2015 Jkt 238001 PO 00000 Frm 00028 Fmt 4703 Sfmt 4703 E:\FR\FM\30DEN1.SGM 30DEN1](https://thefederalregister.org/doc/80_FR_81784/page/1.svg)
![81536 Federal Register / Vol. 80, No. 250 / Wednesday, December 30, 2015 / Notices
• Generally describe the capabilities e. Name of Project: Admiralty Inlet esubscription.asp to be notified via
that registered entities currently have to Pilot Tidal Project. email of new filings and issuances
inspect third party information security f. Location: On the east side of related to this or other pending projects.
practices. Admiralty Inlet in Puget Sound, For assistance, call 1–866–208- 3676 or
• Generally describe the capabilities Washington, about 0.6 mile west of email FERCOnlineSupport@ferc.gov, for
that registered entities currently have to Whidbey Island, within Island County, TTY, call (202) 502–8659. A copy is also
negotiate for additional security in their Washington. available for inspection and
hardware, software, and service g. Filed Pursuant to: Federal Power reproduction at the address in item (h)
contracts. Describe how this may vary Act, 16 U.S.C. 791a–825r. above.
based on the potential vendor or h. Applicant Contact: Mr. Craig W. n. Individuals desiring to be included
supplier and the type of service to be Collar, CEO/General Manager of on the Commission’s mailing list should
provided. Snohomish County PUD #1, 2320 so indicate by writing to the Secretary
• Generally describe how vendors California Street, Everett, WA 98201, of the Commission.
and suppliers are managing risk in their Phone: (425) 783–8473. o. Comments, Protests, or Motions to
supply chain. i. FERC Contact: Mr. Ashish Desai, Intervene: Anyone may submit
(202) 502–8370, Ashish.Desai@ferc.gov. comments, a protest, or a motion to
Panelists j. Deadline for filing comments, intervene in accordance with the
1. Douglas Bauder, Vice President, motions to intervene and protests, is 30 requirements of Rules of Practice and
Operational Services, and Chief days from the issuance date of this Procedure, 18 CFR 385.210, .211, .214.
Procurement Officer, Southern notice. The Commission strongly In determining the appropriate action to
California Edison encourages electronic filing. Please file take, the Commission will consider all
2. Andrew Bochman, Senior Cyber & motions to intervene, protests, protests or other comments filed, but
Energy Security Strategist, INL/DOE comments, and recommendations, using only those who file a motion to
3. Dennis Gammel, Director, Security the Commission’s eFiling system at intervene in accordance with the
Technology, Schweitzer http://www.ferc.gov/docs-filing/ Commission’s Rules may become a
Engineering efiling.asp. Commenters can submit party to the proceeding. Any comments,
4. Andrew Ginter, Vice President, brief comments up to 6,000 characters, protests, or motions to intervene must
Industrial Security, Waterfall without prior registration, using the be received on or before the specified
Security Solutions eComment system at http:// comment date for the particular
5. Steve Griffith, Industry Director, www.ferc.gov/docs-filing/ application.
National Electrical Manufacturers ecomment.asp. You must include your p. Filing and Service of Responsive
Association (NEMA) name and contact information at the end Documents: Any filing must (1) bear in
6. Maria Jenks, Vice President, Supply of your comments. For assistance, all capital letters the title
Chain, Kansas City Power & Light please contact FERC Online Support at ‘‘COMMENTS’’, ‘‘PROTEST’’, or
(KCP&L) FERCOnlineSupport@ferc.gov, (866) ‘‘MOTION TO INTERVENE’’ as
7. Robert McClanahan, Vice President/ 208–3676 (toll free), or (202) 502–8659 applicable; (2) set forth in the heading
Chief Information Officer, Arkansas (TTY). In lieu of electronic filing, please the name of the applicant and the
Electric Cooperative Corporation send a paper copy to: Secretary, Federal project number of the application to
(AECC) Energy Regulatory Commission, 888 which the filing responds; (3) furnish
8. Thomas O’Brien, Chief Information First Street NE., Washington, DC 20426. the name, address, and telephone
Officer, PJM Interconnection, LLC The first page of any filing should number of the person protesting or
4:15 p.m.–4:30 p.m. Closing Remarks include docket number P–12690–015. intervening; and (4) otherwise comply
[FR Doc. 2015–32833 Filed 12–29–15; 8:45 am] k. Description of Project Facilities: with the requirements of 18 CFR
BILLING CODE 6717–01–P
The unconstructed Admiralty Inlet Pilot 385.2001 through 385.2005. All
Tidal Project works would consist of comments, motions to intervene, or
two 300-kW OpenHydro tidal turbines protests must set forth their evidentiary
DEPARTMENT OF ENERGY each mounted on a triangular subsea basis and otherwise comply with the
base, two approximately 7,000-foot-long requirements of 18 CFR 4.34(b). All
Federal Energy Regulatory connecting cables extending onshore, comments, motions to intervene, or
Commission and onshore supporting facilities. protests should relate to project works
l. Description of Request: The which are the subject of the license
[Project No. 12690–015]
applicant has determined the surrender. Agencies may obtain copies
Public Utility District No. 1 of unconstructed project is no longer of the application directly from the
Snohomish County, Washington; economically feasible and proposes to applicant. A copy of any protest or
Notice of Application Accepted for surrender the license. motion to intervene must be served
m. Locations of the Application: A upon each representative of the
Filing, Soliciting Comments, Motions
copy of the application is available for applicant specified in the particular
To Intervene, and Protests
inspection and reproduction at the application. If an intervener files
Take notice that the following Commission’s Public Reference Room, comments or documents with the
hydroelectric application has been filed located at 888 First Street NE., Room Commission relating to the merits of an
with the Commission and is available 2A, Washington, DC 20426, or by calling issue that may affect the responsibilities
mstockstill on DSK4VPTVN1PROD with NOTICES
for public inspection: (202) 502–8371. This filing may also be of a particular resource agency, they
a. Type of Application: Surrender of viewed on the Commission’s Web site at must also serve a copy of the document
License. http://www.ferc.gov/docs-filing/ on that resource agency. A copy of all
b. Project No.: 12690–015. elibrary.asp. Enter the docket number other filings in reference to this
c. Date Filed: December 4, 2015. excluding the last three digits in the application must be accompanied by
d. Applicant: Public Utility District docket number field to access the proof of service on all persons listed in
No. 1 of Snohomish County, document. You may also register online the service list prepared by the
Washington. at http://www.ferc.gov/docs-filing/ Commission in this proceeding, in
VerDate Sep<11>2014 17:59 Dec 29, 2015 Jkt 238001 PO 00000 Frm 00030 Fmt 4703 Sfmt 4703 E:\FR\FM\30DEN1.SGM 30DEN1](https://thefederalregister.org/doc/80_FR_81784/page/3.svg)
Document Created: 2015-12-30 03:16:12
Document Modified: 2015-12-30 03:16:12
| Category | Regulatory Information | |
| Collection | Federal Register | |
| sudoc Class | AE 2.7: GS 4.107: AE 2.106: | |
| Publisher | Office of the Federal Register, National Archives and Records Administration | |
| Section | Notices | |
| FR Citation | 80 FR 81534 |
2024 Federal Register | Disclaimer | Privacy Policy
USC | CFR | eCFR