1 / 10

Project 2008-06 Cyber Security Order 706 Version 5 CIP Standards

Project 2008-06 Cyber Security Order 706 Version 5 CIP Standards. Potential to Adversely Impact ERCOT Black Start Capability. CIP-002-5 Cyber Security — BES Cyber Asset and BES Cyber System Categorization.

adila
Download Presentation

Project 2008-06 Cyber Security Order 706 Version 5 CIP Standards

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Project 2008-06 Cyber Security Order 706 Version 5 CIP Standards Potential to Adversely Impact ERCOT Black Start Capability

  2. CIP-002-5 Cyber Security — BES Cyber Asset and BES Cyber System Categorization • Provides “bright-line” criteria to categorize BES Cyber Systems and BES Cyber Assets based on their impact on real-time operation of the Bulk Electric System (BES). • Classified as High, Medium or Low Impact Rating • CIP-003 through CIP-011 use these categories to designate applicability to specific requirements. • A majority of the requirements are applicable to High and Medium Impact categories

  3. 2. Medium Impact Rating (M) Each BES Cyber Asset or BES Cyber System, not included in Section 1, above, that if rendered unavailable, degraded, or misused would, within 15 minutes adversely impact one or more BES Reliability Operating Services for: 2.1. Generation with an aggregate highest rated net Real Power capability of the preceding 12 calendar months equal to or exceeding 1500 MW in a single Interconnection. 2.2. An aggregate net Reactive Power nameplate rating of 1000 MVAR or greater (excluding those at generation Facilities). 2.3. Each generation Facility that its Planning Coordinator or Transmission Planner designates and informs the Generator Owner or Generator Operator as necessary to avoid BES Adverse Reliability Impacts in the long-term planning horizon. 2.4. Each Blackstart Resource identified in its Transmission Operator's restoration plan.

  4. Impact to ERCOT • All Black Start units will be classified as Medium Impact. • CIP Version 5 removed the provision excluding Cyber Assets that did not have dial-up access or use a routable protocol to communicate outside the Electronic Security Perimeter. • ERCOT can expect to pay for some or all CIP-required upgrades for Black Start units through the bidding process • Black start units will need to be CIP compliant, meaning probable significant initial costs and some level of ongoing cost

  5. Impact to ERCOT • Generation Owners will likely be dis-incentivized from offering units for Black Start • Initial and ongoing cost is exorbitant • Logical and Physical Security • Staffing, contracts and/or systems to develop and maintain processes, procedures, and required documentation • Ongoing costs will remain even though there is no guarantee of repeated selection as a Black Start unit • Increased risk associated with ensuring continued compliance to CIP standards • Administrative burden potential distraction from operating and maintaining unit • No guarantee new CIP standards won’t be developed that adds cost or burden in the foreseeable future (Version 6?)

  6. Impact to ERCOT • Reliability of the ERCOT system may be adversely impacted • Units that have been updated to meet CIP Standards but not selected for Black Start could be forced into mothball or retirement due to economics • Many of these units are small, have small staffs and low capacity factors, do not run much during the year and may be running on the margin. • Inadequate Black Start ability due to Generation Owners not offering units in to bid process

  7. Recommendation • We need to address the concern with the draft Standard to provide a REASONABLE level of reliability to ERCOT. • Registered entities should provide comments to the Standard(s) prior to January 6th. • Texas RE MRC and NSRS to submit comments • For Black Start units with no external connectivity, the risk is low; therefore, they should be moved to the Low Impact category. 

  8. Comment on CIP-002-5 Cyber Security — BES Cyber Asset and BES Cyber System Categorization CIP-002-5 Attachment 1Section 2, Medium Impact Rating 2.4 Each Blackstart Resource with External Connectivity identified in its Transmission Operator's restoration plan

  9. Rationale • Adding “with External Connectivity” would allow those Black Start units engineered with NO external connectivity to be in the Low Impact category.  • The Low Impact category has requirements for controls to restrict physical access and some minimal cyber security requirements (e.g. firewall). • External Access Point could be added if not present under CIP version 3 today.

  10. Questions?

More Related