nerc president’s top priority issues for bulk power … committees coordination...reviewed the...

19
Standing Committee Reliability Issues Coordinated Action Plan: NERC President’s Top Priority Issues for Bulk Power System Reliability Draft June 2011

Upload: vuongduong

Post on 24-May-2018

215 views

Category:

Documents


0 download

TRANSCRIPT

SSttaannddiinngg CCoommmmiitttteeee RReelliiaabbiilliittyy IIssssuueess CCoooorrddiinnaatteedd AAccttiioonn PPllaann

NERC Presidentrsquos Top Priority Issues for Bulk Power System Reliability

Draft

June 2011

Table of Contents

Reliability Issues Coordinated Action Plan June 2011 i

TTaabbllee ooff CCoonntteennttss

Introduction 1

Background 1 Top Priority Reliability Issues 1 Roles ndash Reliability Issues Coordinated Action Plan 2 Next Steps 3

Organization 4

Action Plan 7

Appendix 1 Top Priority Reliability Issues 12

Standing Committee Coordination Group Roster 15

NERC Staff Roster 17

Introduction

Reliability Issues Coordinated Action Plan June 2011 1

IInnttrroodduuccttiioonn

Background

On January 7 2011 NERC announced a preliminary set of high priority reliability issues

intended to focus ERO program areas including standards setting compliance and training and

education1 Subsequent to this posting NERCrsquos technical and standing committees have

reviewed the identified elements provided suggestions and enhancements and have agreed to

work with stakeholders in accepting accountability for implementing an action plan addressing

these reliability issues This document provides an action plan towards addressing these

reliability issues including priorities and milestones

Top Priority Reliability Issues

The priority list is based partially on experience from reviewing actual system events (topics 1

to 4) and forward looking issues (topics 5 to 8) Though the reliability issues were offered as a

starting point for discussion with industry experts the standing committees believed them

important enough to develop this action plan In the next few years it is expected that new

reliability performance measures and root cause analysis methods being initiated by NERC will

further reinforce the setting of reliability priorities The goal is to develop a list of priorities to

focus work in the one to three year horizon on those areas most likely to have a positive impact

on bulk power system reliability The following high level list addresses technical issues and

does not enumerate policy matters that should be dealt with in alternative governance and

regulatory forums (See Appendix 1 for complete description)

1 Misoperations of relay protection and control systems

2 Human errors by field personnel

3 Ambiguous or incomplete voice communications

4 Right-of-way maintenance

5 Changing resource mix

6 Integration of new technologies

7 Preparedness for high impact low frequency events

8 Non-traditional threats via cyber security vulnerabilities

1 NERC Presidentrsquos Top Priority Issues for Bulk Power System Reliability httpwwwnerccomnews_prphpnpr=723 at httpwwwnerccomfileUploadsFileNewsNERC20President20Top20Priority20BPS20Reliability20Issues201-7-11pdf

Introduction

Reliability Issues Coordinated Action Plan June 2011 2

Roles ndash Reliability Issues Coordinated Action Plan

Since these reliability issues can functionally cross multiple committees coordination is

essential to the successful implementation of the Reliability Issues Coordinated Action Plan The

standing committees and NERC Staff have formulated a coordinated approach to ensure

effectiveness in implementation Figure 1 below provides the roles coordination points and

responsibilities of this coordination effort to support this Reliability Issues Coordinated Action

Plan

Figure 1 Roles ndash Reliability Issues Coordinated Action Plan

Introduction

Reliability Issues Coordinated Action Plan June 2011 3

Next Steps

Once lead standing committees are identified for each of the reliability issues and through

their usual processes they will then direct the appropriate sub-groups review and refine their

respective scopes and consider the needed resources deliverables and milestones In many

instances a subgroup is already in place working on one or more of these reliability issues If

no appropriate subgroup exists the standing committees will develop a draft scope and form a

subgroup to address the reliability issue Figure 2 below describes the work plan development

and implementation process

Figure 2 Work Plan Development and Implementation Process

Lead Standing Committee Identified

Develop Action Plan seek approval from Standing Committees and BOT

Direct appropriate Subgroup to Address Reliability Issue

Deliver on Milestones in Plan

Organization

Reliability Issues Coordinated Action Plan June 2011 4

OOrrggaanniizzaattiioonn

The Electric Reliability Organization (ERO) Strategic Goals through 2015 are summarized in the following key goals2

Goal 1 The ERO will have clear results-based reliability standards that provide for an

adequate level of bulk power system reliability

Goal 2 Bulk power system owners operators and users will demonstrate sustained

cultures of learning and reliability excellence built upon underlying foundations

of compliance and effective risk management and mitigation

Goal 3 The ERO will develop and maintain effective reliability performance measures

and will continue to develop high quality reliability assessments based on long

range and seasonal forecasts as well as emerging issues

Goal 4 Bulk power system owners operators and users will effectively manage risks

from cyber and physical attacks and other high-impact low-frequency events

Goal 5 The ERO will balance the role of being a strong independent enforcement

authority with one of providing owners operators and users timely and

transparent feedback on compliance and effective incentives for improving

reliability

Goal 6 NERC and the regional entities will execute statutory functions in a collaborative

enterprise and thereby achieve efficiencies and effective process controls while

leveraging the expertise of staff and reliability stakeholder resources

Goal 7 The ERO will maintain an exceptional reputation as the trusted leader of the

reliability community and instill a high degree of confidence in the reliability of

the bulk power system

Based on NERCrsquos Strategic Plan and the top priority Issues for bulk power system

reliability the standing committeersquos leadership and NERC staff have assigned lead

committees for each reliability issue and formulated deliverables priorities and

milestones (see Table 1)

2 February 17 2011 Board of Trustees agenda item 7 Electric Reliability Organization Strategic Goals through 2015 httpwwwnerccomdocsdocsbotBOT-0211a-completepdf

Organization

Reliability Issues Coordinated Action Plan June 2011 5

Table 1 Proposed LeadSupport NERC Staff and Standing Committees

Top Priority Issues

NERC Lead

Standing Committee Lead NERC Support

Standing Committee Support

1 M

iso

pe

rati

on

s o

f re

lay

pro

tect

ion

and

co

ntr

ol s

yste

ms

Long

Rodriquez

Connor

Cummings

Bian

Standards Committee

Standard Drafting Teams (SDTs) o Protection System Maintenance o Coordination of Protection

Systems o Generator Verification o Protection System

Misoperations

Planning Committee

System Protection amp Control Subcommittee

Reliability Metrics Working Group

Kezele

Moon

Operating Committee

Compliance and Certification Committee

2 H

um

an e

rro

rs b

y

fie

ld p

ers

on

ne

l

Galloway

Kezele

Operating Committee

Personnel Subcommittee

Long Rodriquez

Connor

Moon

Standards Committee

Reliability Coordination SDT

Operations Communications Protocols SDT

Planning Committee

Compliance and Certification Committee

3 A

mb

igu

ou

s o

r

inco

mp

lete

vo

ice

com

mu

nic

atio

n Galloway

Kezele

Operating Committee

Long Rodriquez

Connor

Moon

Standards Committee

Reliability Coordination SDT

Operations Communications Protocols SDT

Planning Committee

Compliance and Certification Committee

4 R

igh

t-o

f-w

ay

mai

nte

nan

ce Kezele

Carter Operating Committee Connor

Moon

Long Rodriquez

Planning Committee

Compliance and Certification Committee

Standards Committee

Vegetation Management SDT

5 C

han

gin

g

reso

urc

e m

ix

Connor Moura Moura

Moura

Planning Committee

Reliability Assessment Subcommittee

Integration of Variable Generation Task Force

Smart Grid Task Force

Kezele

Moon

Connor Moura

Bian Moura

Operating Committee

Compliance and Certification Committee

Planning Committee

Demand Response Data Task Force

TADSGADS

Smart Grid Task Force

Organization

Reliability Issues Coordinated Action Plan June 2011 6

Top Priority Issues

NERC Lead

Standing Committee Lead NERC Support

Standing Committee Support

6 I

nte

grat

ion

of

ne

w

tech

no

logi

es

Connor Moura Moura

Planning Committee

Smart Grid Task Force

Reliability Assessment Subcommittee

Mix

Moon

Kezele

Critical Infrastructure Protection Committee

Compliance and Certification Committee

Operating Committee

7 P

rep

are

dn

ess

fo

r h

igh

imp

act

low

fre

qu

en

cy e

ven

ts

Connor Bian

Moura

Kezele Kezele

Mix

Roxey

Planning Committee

Spare Equipment Database Task Force

Geomagnetic Disturbance Task Force

Operating Committee

Severe Impact Resilience Task Force

Critical Infrastructure Protection Committee

Cyber Attack Task Force

Moon Compliance and Certification Committee

8 N

on

-tra

dit

ion

al

thre

ats

via

cyb

er-

secu

rity

vuln

era

bili

tie

s

Mix Critical Infrastructure Protection Committee

Connor Moura

Kezele

Moon

Planning Committee

Smart Grid Task Force

Operating Committee

Compliance and Certification Committee

Action Plan

Reliability Issues Coordinated Action Plan

June 2011

7

AAccttiioonn PPllaann

The following Action Plan (Table 2) provides Proposed Enhancements Abstract of activity priorities key deliverables and projected milestones

Table 2 Reliability Issues Action Plan

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

1

Mis

op

erat

ion

s o

f re

lay

pro

tect

ion

an

d c

on

tro

l sys

tem

s

Standards Committee

NERC Reliability Standards

Prepare and achieve approval Reliability Standards that minimize relay control system misoperations

High 1 PRC-005 Protection System

Maintenance 2 PRC-004 Protection System Misoperation

Identification and Correction (Rapid Development Pilot)

3 PRC-024 Generator Performance During Frequency and Voltage Excursions

4 PRC-019 Coordination of Generator Voltage Regulator Controls with Unit Capabilities and Protection

5 PRC-001 Protection System Coordination

1 BOT eta Q3 2011 2 BOT eta Q2 2012 3 BOT eta Q2 2012

4 BOT eta Q4 2012

5 BOT eta Q1 2013

Planning Committee System Protection amp Control Subcommittee

Reliability Metrics Working Group

Provide tools for improvement and measure trends

Enhancing the available tools to planners and operators and measuring trends will support industry efforts to improve

High

1 Guidance for relay maintenance and adequacy of protection engineering

2 Metrics that measure relaycontrol system misoperation

1 SPCS deliver Guide Q2 2012

2 RMWG develops metrics Q4 2011 TADSWG collects data as needed

Low 3 Address ways to enhance operator trainingrelay knowledge

3 SPCS in collaboration with the OCrsquos Personnel Subcommittee deliver tutorial for OC review Q4 2013

2

Hu

man

er

rors

by

fiel

d

per

son

nel

Operating Committee Personnel Subcommittee

Developing root causes lessons learned and guidance on processes can shape industry improvement opportunities

Enhancing industry knowledge of failure modes can improve reliability Standard development on operator training can help ensure successful implementation of recommendations

High 1 Develop guidance for root cause aspects

ndash including planningmanagement decisions

2 Develop refined cause codes to capture root cause

3 Develop processes that lead to quicker sharing of lessons learned

4 Develop guidance on tools development (man‐machine interfacedesign)

1 EAWG develop root cause guidebook by Q4 2012

2 EAWG to develop cause codes by Q4 2013

3 EAWG to streamline lessons learned process by Q4 2011

4 RCWG to create tools development guidebook Q4 2014

Action Plan

Reliability Issues Coordinated Action Plan June 2011 8

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

Medium 5 Develop process guidance for task design

(process resolutions plan the work and work the plan)

6 Support Personnel Training Standard

5 Personnel Subcommittee to prioritize and develop task design guidance Q3 2012

6 Personnel Subcommittee to develop SAR by Q4 2012

3

Am

big

uo

us

or

inco

mp

lete

vo

ice

com

mu

nic

atio

n

Standards Committee NERC Reliability Standards

Prepare and approve Reliability Standards that address communications

High 1 COM-002-3 ndash Communications and

Coordination Standard 2 COM-003-1 ndash Operating Personnel

Communications Protocols Standard

1 BOT eta Q1 2012

2 BOT eta Q4 2012

Operating Committee

Measurably improved communications in system operations

Provide guidance clarifying for operators the role of communications in improvement of reliability Should be a subset of 2 (good practices training deliverables etc)

Medium 1 Use other industries for guidance 2 Provide guidance on the benefits of using

of standard operating language or good practices separate from three-part communications Clarify for operators when communications are mission critical and when prescriptive forms impede reliability

3 Provide clear interpretations of the relevant reliability standards so that there is certainty for directives and associated communication actions

1 RCWG investigates and documents other industryrsquos experience and use of communications Report Q4 2012

2 RCWG develops guidelines on benefits from standard communication approaches Detail the use of communications to improve while not reducing reliability Q3 2013

3 Operating Committee works with NERCrsquos Compliance Operations on Compliance Application Notices (CAN) to eliminate ambiguous terms used in operations Q2 2012

4

Rig

ht-

of-

way

m

ain

ten

ance

Operating Committee (Primary Technical Committee ndash not determined)

Measurably improved right-of-way maintenance

Ensure that ROW maintenance practices result incompliance with FAC-003-2 requirements thereby maintaining reliability

High 1 Document actions undertaken that

address the facility ratings Alert results Leverage the North American Transmission Forum work for planning calculationsratings

2 Provide guidance for operational coordination among operating units TOPs RCs and BAs for different situations

1 Subgroup formed in collaboration with NERC and the Regional Entities along with the North American Transmission forum to document the result of the FAC-003-2 plans to develop industry guidance and action Q4 2011

2 Subgroup should develop guidelines for coordination among TOPs RCs and BAs Q4 2012

Action Plan

Reliability Issues Coordinated Action Plan June 2011 9

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

Standards Committee NERC Reliability Standards

Prepare and achieve approval of Reliability Standard for Transmission Vegetation Management

Low 1 FAC-003-2 ndash Transmission Vegetation

Management 1 BOT eta Q3 2011

5

Ch

angi

ng

reso

urc

e m

ix

Planning Committee

Reliability Assessment Subcommittee

Integration of Variable Generation Task Force

Smart Grid Task Force

Ready industry for the changing resource mix and technology integration by providing guidance and input into NERCrsquos Reliability Standards

Unprecedented change in resource mix being realized through retirement of aging units capital fuel costs along with environmental regulations This change along with technological advances in communications and control can change the well understood character of the bulk power system requiring changes in the planning approaches to ensure operational reliability

Medium 1 IVGTF ndash addressing frequency voltage

response resource flexibility contingency reserves

2 SGTF ndash addressing reliability impacts 3 RIS-RAS - addressing scenarios resource

mix planning probabilistic assessments 4 Scenarios that address resource mix

implications such as natural gas interdependence

5 Evaluate benefit of probabilistic metrics and provide guidance to plannersoperators

6 Develop targetsmetricsrefinements for planningoperation

7 Provide guidance on tools for operators 8 Develop potential standards proposals

or guidanceadvisories that enhance reliability

9 Provide recommendations for expanded planning assessments to address resource mix changes

1 through 13 See Planning Committeersquos Strategic Plan

3

and Action Plan4

3 through 6 Resource Issues and Reliability Assessment Subcommittees

Annual Summer Reliability Assessment

Annual Winter Reliability Assessment

Annual Long-Term Reliability Assessment o Scenarios o Emerging Issues o Probabilistic

3 httpwwwnerccomdocspcAgendaItem_5a_PC_2011-2016_Strategic_Plan_v5_LINKpdf

4 httpwwwnerccomdocspcAgendaItem_5ai_PC_Strategic_Plan_Next20Steps2020Future20Work20Plan_v5_LINKpdf

Action Plan

Reliability Issues Coordinated Action Plan June 2011 10

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

6

Inte

grat

ion

of

new

te

chn

olo

gies

Planning Committee

Smart Grid Task Force

Reliability Assessment Subcommittee

10 Smart Grid impacts from distribution

systems (Address cyber aspects in 8 Non-Traditional Threats via Cyber-Security Vulnerabilities)

11 IVGTF dealing with distribution (renewables EV and conventional) resource integration

12 DRDTF addressing high levels of demand response integration

13 TIS and SPCS will provide guidance for modeling and controls systems managementcoordination

Assessment

7

Pre

par

edn

ess

for

hig

h

imp

act

low

fre

qu

ency

ev

ents

Planning Committee

Spare Equipment Database Task Force

Geomagnetic Disturbance Task Force

Operating Committee

Severe Impact Resilience Task Force

Critical Infrastructure Protection Committee

Cyber Attack Task Force

Address the risks from selected high impact low frequency events which can have unacceptable consequences on bulk power system reliability

The bulk power system has significant amounts of built-in resiliency However it has been planned and operated with the known risks to successfully manage system performance With changing threats from cyber physical and new facts about GMD industry will adjust their planning and operational activities to address these evolving risks

High 1 The Electricity Subsector Coordinating

Council has developed a BOT approved Critical Infrastructure Strategic Roadmap

5 in Q4 2010

2 The technical Committees have developed a Critical Infrastructure Strategic Initiatives Coordinated Action Plan

6 BOT approved in Q4 2010

1-2 Covered in the technical committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan

5 httpwwwnerccomdocsesccESCC_Critical_Infrastructure_Strategic_Roadmappdf

6 httpwwwnerccomdocsciscapCritical_Infrastructure_Strategic_Initiatives_Coordinated_Action_Plan_BOT_Apprd_11-2010pdf

Action Plan

Reliability Issues Coordinated Action Plan June 2011 11

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

8

No

n-t

rad

itio

nal

th

reat

s vi

a cy

ber

-se

curi

ty

vuln

erab

iliti

es

Critical Infrastructure Protection Committee

A resilient system fortified by industry planning and operational practices

The continuously evolving threat from cyber-security vulnerabilities requires new processes and procedures both for system planning and operations Industry awareness and cooperation with governmental jurisdictions are key aspects for this improved situational awareness

High

1 Also part of the deliverables in item 7 Preparedness for High Impact Low Frequency events

2 Metric development to measure cyber strength being developed with the Planning Committeersquos Smart Grid Task Force (SGTF)

3 Ongoing industry Alerts as required 4 Guidelines required to advise industry on

the establishment of appropriate cyber-security programs in their organizations

1 Covered in the technical

committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan

2 See Planning Committeersquos Strategic Plan and Action Plan along with the work plan for the SGTF

7

3 See NERCrsquos Alert website8

4 A subgroup formed to develop guidelines reviewing other industryrsquos to take advantage of existing knowledge 2012 Q4

7 httpwwwnerccomfilesSGTF_Report_Final_posted_v11pdf

8 httpwwwnerccompagephpcid=5|63

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

12

AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess

Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the

following list and abstract description was developed

1 Misoperations of relay protection and control systems ndash Nearly all major system failures

excluding perhaps those caused by severe weather have misoperations of relays or

automatic controls as a factor contributing to the propagation of the failure Protection

systems are designed to operate reliably when needed under the presence of a fault on the

system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without

allowing the fault to transfer into adjoining facilities The greater the number of facilities

involved in an event the more severe the impact to the rest of the bulk power system with

cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout

being the extreme Relays can misoperate either operate when not needed or fail to

operate when needed for a number of reasons First the device could experience an

internal failure ndash but this is rare Most commonly relays fail to operate correctly due to

incorrect settings improper coordination (of timing and set points) with other devices

ineffective maintenance and testing or failure of communications channels or power

supplies Preventable errors can be introduced by field personnel and their supervisors or

more programmatically by the organization Adding to the risk is that system protection is

an extremely complex engineering field ndashthere are many practitioners but few masters

2 Human errors by field personnel ndash Field personnel play an important role in the

maintenance and operation of the bulk power system They often are switching equipment

in and out of service and aligning alternative configurations Risks can be introduced when

field personnel operate equipment in a manner that reduces the redundancy of the bulk

power system sometimes even creating single points of failure that would not exist

normally Taking outages of equipment to conduct maintenance is a routine and necessary

part of reliable bulk power system operation However any alterations to the configuration

of the network must be carefully planned in advance to minimize loss of redundancy and

avoid unintended single points of failure It is also important that such changes and risks be

communicated to system operators and reliability coordinators in advance so that they can

make adjustments in their operating plans and reliability assessments

3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system

operators and reliability coordinators are comfortable with informal communications with

field and power plant personnel and neighboring systems Experience from analyzing

various events indicates there is often a sense of awkwardness when personnel transition

from conversational discussion to issuing reliability instructions It is also human nature to

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

13

be uncomfortable in applying formal communication procedures after personnel have

developed informal styles over many years Confusion in making the transition from normal

conversation to formal communications can introduce misunderstandings and possibly even

incorrect actions or assumptions Further once the need to transition to more formal

structure is recognized the transition is often not complete or effective Results can include

unclear instructions confusion whether an instruction is a suggestion or a directive whether

specific action is required or a set of alternative actions are permissible and confusion over

what elements of the system are being addressed

4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation

management programs as a key recommendation for avoiding future cascading failures

More broadly any encroachments in the right-of-way that reduce clearances to the point of

lowering facility ratings or reducing the randomness of possible contacts can be a risk to

reliability Although these impacts may not always be readily apparent under extreme wind

and temperature conditions they may become more of a risk to bulk power system

reliability There are many challenges to effective right-of-way maintenance especially

maintaining proper clearances including interventions by private landowners local

municipalities and federal and state landowners

5 Changing resource mix ndash Energy and environmental policies along with energy markets are

driving proposals toward unprecedented changes in the resource mix of the bulk power

system Examples include integration of significant amounts of renewable (variable such as

wind and solar) natural gas storage and demand resources to provide energy and capacity

Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a

century of operational experience with the existing resource mix However integration of

these new resources results in operating characteristics significantly different from

conventional steam production facilities An array of reliability services must be provided

over a range of time horizons from seconds to minutes to hours and days and annually such

as load following contingency reserves frequency response reactive supply capacity and

voltage control and power system stability Continued reliable operation of the bulk power

system will require an industry dialog with policymakers and regulators Understanding the

impacts on reliability will depend on accurate modeling of new resources and development

of new methods and tools for the provision of essential reliability services

6 Integration of new technologies ndash Introduction of electric vehicles demand-side

management variable generation distributed resources and smart grid technologies

presents tremendous opportunities but also introduces changes to the operating

characteristics of the bulk power system Integration of these new technologies requires

changes in the way the bulk power system is planned and operated to maintain reliability

Further additional toolsmodels are required to support their integration to meet policy and

strategic goals Without these changes it will be challenging to maintain reliability with

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

14

large-scale deployments For example some smart grid devicessystems increase exposure

to cyber threats while variable generation requires additional ancillary services Integration

of these new technologies must be achieved in a manner that does not undermine existing

levels of stability resilience and security of the bulk power system

7 Preparedness for high impact low frequency events ndash Although there is a wide range of

threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for

possible events that could debilitate the bulk power system for extended periods such as

widespread coordinated physicalcyber attacks or geomagnetic storms The industry must

consider improving the design of the bulk power system to address these potential risks and

prepare coordinated North American response plans for use during catastrophic events and

be ready to deploy those plans to restore essential services in a timely manner

8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-

based programs policies and processes to prepare for react to and recover from cyber

security vulnerabilities is a high priority for the industry The bulk power system has not yet

experienced wide-spread cyber-attacks and a contributing factor has been the traditional

physical separation between the industrial control systemSCADA environment and the

business and administrative networks This situation however is rapidly changing

predominantly due to the efficiencies that can be achieved by leveraging shared networks

and resources so now even physically separated environments are susceptible For example

the bulk power system could be as vulnerable to digital threats as IT systems but with far

more critical implications as the recent Stuxnet virus has shown Disabling or turning

systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial

control system software can be changed and data can be stolen without intrusions even

being detected These injection vectors serve as a blueprint for future attackers who wish to

access controllers safety systems and protection devices to insert malicious code targeting

changes to set points and switches as well as alteration or suppression of measurements

Standing Committee Coordination Group Roster

Reliability Issues Coordinated Action Plan

June 2011

15

SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr

Position

Name Title

Company City StateProvince

Phone E-mail

CCC Chair W Clay Smith

2100 East Exchange Place Tucker Georgia 30084-5336

(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom

CCC Vice Chair Terry L Bilke

Director Standards and Compliance

Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202

317 249-5463 317 249-5358 Fax tbilkemidwestisoorg

CCC Vice Chair Brett Hallborg

Manager of Operations Training

BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2

(604) 455-1778 bretthallborgbchydroc

om

CIPC Chair Barry Lawson

Manager Power Delivery

National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203

(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo

p

CIPC Vice Chair Cyber

Charles F Abell PE Supervising Engineer

Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103

(314) 554-3817 (314) 206-0046 Fx cfabellamerencom

CIPC Vice Chair Physical Security

Robert D Canada Business Assurance Principal

Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308

(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom

OC Chair JS Holeman

Director System Operations

Duke Energy

(704) 382-0011 SamHolemanduke-energycom

Action Plan

Reliability Issues Coordinated Action Plan June 2011 16

Position

Name Title

Company City StateProvince

Phone E-mail

OC Vice Chair Tom Bowe

Executive Director of Compliance

PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403

610-666-4776 (610) 666-4287 Fx bowetpjmcom

PC Chair Tom Burgess

Director FERC Compliance

FirstEnergy Corp

330-384-5225 burgesstfirstenergycorpcom

PC Vice Chair Jeffrey L Mitchell

Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333

(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg

PCGC Chair Jacob Burger

Transmission System Control Coordinator

Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832

(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom

SC Chair Allen Mosher

Senior Director of Policy Analysis and Reliability

American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715

(202) 467-2944 (202) 467-2992 Fx amosherappanetorg

SC Vice Chair PS (Ben) Li

President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6

(647) 388-1498 (905) 887-2235 Fx benbenlica

REMG Representative

Edward A Schwerdt President and CEO

Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703

(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg

NERC Staff Roster

Reliability Issues Coordinated Action Plan

June 2011

17

NNEERRCC SSttaaffff RRoosstteerr

Position

Name Title

PhoneE-mail

NERC Staff Alvin J (AJ) Connor

Manager of Power System Analysis (609) 751-2579 ajconnornercnet

NERC Staff Tom Galloway

Senior Vice President and Chief Reliability Officer

(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet

NERC Staff Brian M Harrell

Manager of CIP Standards Training and Awareness

(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet

NERC Staff Larry J Kezele

Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet

NERC Staff Mark G Lauby

Vice President and Director of Reliability Assessment and Performance Analysis

(609) 452-8060 (609) 452-9550 Fax marklaubynercnet

NERC Staff Maureen E Long

Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet

NERC Staff Scott R Mix

CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet

NERC Staff Michael Moon

Director of Compliance Operations

(404) 446-2560 michaelmoonnercnet

NERC Staff Andrew Rodriquez Director of Standards Development

(404) 446-2560 andyrodriqueznercnet

NERC Staff Peter Knoetgen Director of Training and Accreditation

404-446-9688 peterknoetgennercnet

NERC Staff Herb Schrayshuen

Vice President and Director of Standards

((315) 439-1390 herbschrayshuennercnet

NERC Staff Mark Weatherford

Vice President and Chief Security Officer

(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet

Table of Contents

Reliability Issues Coordinated Action Plan June 2011 i

TTaabbllee ooff CCoonntteennttss

Introduction 1

Background 1 Top Priority Reliability Issues 1 Roles ndash Reliability Issues Coordinated Action Plan 2 Next Steps 3

Organization 4

Action Plan 7

Appendix 1 Top Priority Reliability Issues 12

Standing Committee Coordination Group Roster 15

NERC Staff Roster 17

Introduction

Reliability Issues Coordinated Action Plan June 2011 1

IInnttrroodduuccttiioonn

Background

On January 7 2011 NERC announced a preliminary set of high priority reliability issues

intended to focus ERO program areas including standards setting compliance and training and

education1 Subsequent to this posting NERCrsquos technical and standing committees have

reviewed the identified elements provided suggestions and enhancements and have agreed to

work with stakeholders in accepting accountability for implementing an action plan addressing

these reliability issues This document provides an action plan towards addressing these

reliability issues including priorities and milestones

Top Priority Reliability Issues

The priority list is based partially on experience from reviewing actual system events (topics 1

to 4) and forward looking issues (topics 5 to 8) Though the reliability issues were offered as a

starting point for discussion with industry experts the standing committees believed them

important enough to develop this action plan In the next few years it is expected that new

reliability performance measures and root cause analysis methods being initiated by NERC will

further reinforce the setting of reliability priorities The goal is to develop a list of priorities to

focus work in the one to three year horizon on those areas most likely to have a positive impact

on bulk power system reliability The following high level list addresses technical issues and

does not enumerate policy matters that should be dealt with in alternative governance and

regulatory forums (See Appendix 1 for complete description)

1 Misoperations of relay protection and control systems

2 Human errors by field personnel

3 Ambiguous or incomplete voice communications

4 Right-of-way maintenance

5 Changing resource mix

6 Integration of new technologies

7 Preparedness for high impact low frequency events

8 Non-traditional threats via cyber security vulnerabilities

1 NERC Presidentrsquos Top Priority Issues for Bulk Power System Reliability httpwwwnerccomnews_prphpnpr=723 at httpwwwnerccomfileUploadsFileNewsNERC20President20Top20Priority20BPS20Reliability20Issues201-7-11pdf

Introduction

Reliability Issues Coordinated Action Plan June 2011 2

Roles ndash Reliability Issues Coordinated Action Plan

Since these reliability issues can functionally cross multiple committees coordination is

essential to the successful implementation of the Reliability Issues Coordinated Action Plan The

standing committees and NERC Staff have formulated a coordinated approach to ensure

effectiveness in implementation Figure 1 below provides the roles coordination points and

responsibilities of this coordination effort to support this Reliability Issues Coordinated Action

Plan

Figure 1 Roles ndash Reliability Issues Coordinated Action Plan

Introduction

Reliability Issues Coordinated Action Plan June 2011 3

Next Steps

Once lead standing committees are identified for each of the reliability issues and through

their usual processes they will then direct the appropriate sub-groups review and refine their

respective scopes and consider the needed resources deliverables and milestones In many

instances a subgroup is already in place working on one or more of these reliability issues If

no appropriate subgroup exists the standing committees will develop a draft scope and form a

subgroup to address the reliability issue Figure 2 below describes the work plan development

and implementation process

Figure 2 Work Plan Development and Implementation Process

Lead Standing Committee Identified

Develop Action Plan seek approval from Standing Committees and BOT

Direct appropriate Subgroup to Address Reliability Issue

Deliver on Milestones in Plan

Organization

Reliability Issues Coordinated Action Plan June 2011 4

OOrrggaanniizzaattiioonn

The Electric Reliability Organization (ERO) Strategic Goals through 2015 are summarized in the following key goals2

Goal 1 The ERO will have clear results-based reliability standards that provide for an

adequate level of bulk power system reliability

Goal 2 Bulk power system owners operators and users will demonstrate sustained

cultures of learning and reliability excellence built upon underlying foundations

of compliance and effective risk management and mitigation

Goal 3 The ERO will develop and maintain effective reliability performance measures

and will continue to develop high quality reliability assessments based on long

range and seasonal forecasts as well as emerging issues

Goal 4 Bulk power system owners operators and users will effectively manage risks

from cyber and physical attacks and other high-impact low-frequency events

Goal 5 The ERO will balance the role of being a strong independent enforcement

authority with one of providing owners operators and users timely and

transparent feedback on compliance and effective incentives for improving

reliability

Goal 6 NERC and the regional entities will execute statutory functions in a collaborative

enterprise and thereby achieve efficiencies and effective process controls while

leveraging the expertise of staff and reliability stakeholder resources

Goal 7 The ERO will maintain an exceptional reputation as the trusted leader of the

reliability community and instill a high degree of confidence in the reliability of

the bulk power system

Based on NERCrsquos Strategic Plan and the top priority Issues for bulk power system

reliability the standing committeersquos leadership and NERC staff have assigned lead

committees for each reliability issue and formulated deliverables priorities and

milestones (see Table 1)

2 February 17 2011 Board of Trustees agenda item 7 Electric Reliability Organization Strategic Goals through 2015 httpwwwnerccomdocsdocsbotBOT-0211a-completepdf

Organization

Reliability Issues Coordinated Action Plan June 2011 5

Table 1 Proposed LeadSupport NERC Staff and Standing Committees

Top Priority Issues

NERC Lead

Standing Committee Lead NERC Support

Standing Committee Support

1 M

iso

pe

rati

on

s o

f re

lay

pro

tect

ion

and

co

ntr

ol s

yste

ms

Long

Rodriquez

Connor

Cummings

Bian

Standards Committee

Standard Drafting Teams (SDTs) o Protection System Maintenance o Coordination of Protection

Systems o Generator Verification o Protection System

Misoperations

Planning Committee

System Protection amp Control Subcommittee

Reliability Metrics Working Group

Kezele

Moon

Operating Committee

Compliance and Certification Committee

2 H

um

an e

rro

rs b

y

fie

ld p

ers

on

ne

l

Galloway

Kezele

Operating Committee

Personnel Subcommittee

Long Rodriquez

Connor

Moon

Standards Committee

Reliability Coordination SDT

Operations Communications Protocols SDT

Planning Committee

Compliance and Certification Committee

3 A

mb

igu

ou

s o

r

inco

mp

lete

vo

ice

com

mu

nic

atio

n Galloway

Kezele

Operating Committee

Long Rodriquez

Connor

Moon

Standards Committee

Reliability Coordination SDT

Operations Communications Protocols SDT

Planning Committee

Compliance and Certification Committee

4 R

igh

t-o

f-w

ay

mai

nte

nan

ce Kezele

Carter Operating Committee Connor

Moon

Long Rodriquez

Planning Committee

Compliance and Certification Committee

Standards Committee

Vegetation Management SDT

5 C

han

gin

g

reso

urc

e m

ix

Connor Moura Moura

Moura

Planning Committee

Reliability Assessment Subcommittee

Integration of Variable Generation Task Force

Smart Grid Task Force

Kezele

Moon

Connor Moura

Bian Moura

Operating Committee

Compliance and Certification Committee

Planning Committee

Demand Response Data Task Force

TADSGADS

Smart Grid Task Force

Organization

Reliability Issues Coordinated Action Plan June 2011 6

Top Priority Issues

NERC Lead

Standing Committee Lead NERC Support

Standing Committee Support

6 I

nte

grat

ion

of

ne

w

tech

no

logi

es

Connor Moura Moura

Planning Committee

Smart Grid Task Force

Reliability Assessment Subcommittee

Mix

Moon

Kezele

Critical Infrastructure Protection Committee

Compliance and Certification Committee

Operating Committee

7 P

rep

are

dn

ess

fo

r h

igh

imp

act

low

fre

qu

en

cy e

ven

ts

Connor Bian

Moura

Kezele Kezele

Mix

Roxey

Planning Committee

Spare Equipment Database Task Force

Geomagnetic Disturbance Task Force

Operating Committee

Severe Impact Resilience Task Force

Critical Infrastructure Protection Committee

Cyber Attack Task Force

Moon Compliance and Certification Committee

8 N

on

-tra

dit

ion

al

thre

ats

via

cyb

er-

secu

rity

vuln

era

bili

tie

s

Mix Critical Infrastructure Protection Committee

Connor Moura

Kezele

Moon

Planning Committee

Smart Grid Task Force

Operating Committee

Compliance and Certification Committee

Action Plan

Reliability Issues Coordinated Action Plan

June 2011

7

AAccttiioonn PPllaann

The following Action Plan (Table 2) provides Proposed Enhancements Abstract of activity priorities key deliverables and projected milestones

Table 2 Reliability Issues Action Plan

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

1

Mis

op

erat

ion

s o

f re

lay

pro

tect

ion

an

d c

on

tro

l sys

tem

s

Standards Committee

NERC Reliability Standards

Prepare and achieve approval Reliability Standards that minimize relay control system misoperations

High 1 PRC-005 Protection System

Maintenance 2 PRC-004 Protection System Misoperation

Identification and Correction (Rapid Development Pilot)

3 PRC-024 Generator Performance During Frequency and Voltage Excursions

4 PRC-019 Coordination of Generator Voltage Regulator Controls with Unit Capabilities and Protection

5 PRC-001 Protection System Coordination

1 BOT eta Q3 2011 2 BOT eta Q2 2012 3 BOT eta Q2 2012

4 BOT eta Q4 2012

5 BOT eta Q1 2013

Planning Committee System Protection amp Control Subcommittee

Reliability Metrics Working Group

Provide tools for improvement and measure trends

Enhancing the available tools to planners and operators and measuring trends will support industry efforts to improve

High

1 Guidance for relay maintenance and adequacy of protection engineering

2 Metrics that measure relaycontrol system misoperation

1 SPCS deliver Guide Q2 2012

2 RMWG develops metrics Q4 2011 TADSWG collects data as needed

Low 3 Address ways to enhance operator trainingrelay knowledge

3 SPCS in collaboration with the OCrsquos Personnel Subcommittee deliver tutorial for OC review Q4 2013

2

Hu

man

er

rors

by

fiel

d

per

son

nel

Operating Committee Personnel Subcommittee

Developing root causes lessons learned and guidance on processes can shape industry improvement opportunities

Enhancing industry knowledge of failure modes can improve reliability Standard development on operator training can help ensure successful implementation of recommendations

High 1 Develop guidance for root cause aspects

ndash including planningmanagement decisions

2 Develop refined cause codes to capture root cause

3 Develop processes that lead to quicker sharing of lessons learned

4 Develop guidance on tools development (man‐machine interfacedesign)

1 EAWG develop root cause guidebook by Q4 2012

2 EAWG to develop cause codes by Q4 2013

3 EAWG to streamline lessons learned process by Q4 2011

4 RCWG to create tools development guidebook Q4 2014

Action Plan

Reliability Issues Coordinated Action Plan June 2011 8

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

Medium 5 Develop process guidance for task design

(process resolutions plan the work and work the plan)

6 Support Personnel Training Standard

5 Personnel Subcommittee to prioritize and develop task design guidance Q3 2012

6 Personnel Subcommittee to develop SAR by Q4 2012

3

Am

big

uo

us

or

inco

mp

lete

vo

ice

com

mu

nic

atio

n

Standards Committee NERC Reliability Standards

Prepare and approve Reliability Standards that address communications

High 1 COM-002-3 ndash Communications and

Coordination Standard 2 COM-003-1 ndash Operating Personnel

Communications Protocols Standard

1 BOT eta Q1 2012

2 BOT eta Q4 2012

Operating Committee

Measurably improved communications in system operations

Provide guidance clarifying for operators the role of communications in improvement of reliability Should be a subset of 2 (good practices training deliverables etc)

Medium 1 Use other industries for guidance 2 Provide guidance on the benefits of using

of standard operating language or good practices separate from three-part communications Clarify for operators when communications are mission critical and when prescriptive forms impede reliability

3 Provide clear interpretations of the relevant reliability standards so that there is certainty for directives and associated communication actions

1 RCWG investigates and documents other industryrsquos experience and use of communications Report Q4 2012

2 RCWG develops guidelines on benefits from standard communication approaches Detail the use of communications to improve while not reducing reliability Q3 2013

3 Operating Committee works with NERCrsquos Compliance Operations on Compliance Application Notices (CAN) to eliminate ambiguous terms used in operations Q2 2012

4

Rig

ht-

of-

way

m

ain

ten

ance

Operating Committee (Primary Technical Committee ndash not determined)

Measurably improved right-of-way maintenance

Ensure that ROW maintenance practices result incompliance with FAC-003-2 requirements thereby maintaining reliability

High 1 Document actions undertaken that

address the facility ratings Alert results Leverage the North American Transmission Forum work for planning calculationsratings

2 Provide guidance for operational coordination among operating units TOPs RCs and BAs for different situations

1 Subgroup formed in collaboration with NERC and the Regional Entities along with the North American Transmission forum to document the result of the FAC-003-2 plans to develop industry guidance and action Q4 2011

2 Subgroup should develop guidelines for coordination among TOPs RCs and BAs Q4 2012

Action Plan

Reliability Issues Coordinated Action Plan June 2011 9

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

Standards Committee NERC Reliability Standards

Prepare and achieve approval of Reliability Standard for Transmission Vegetation Management

Low 1 FAC-003-2 ndash Transmission Vegetation

Management 1 BOT eta Q3 2011

5

Ch

angi

ng

reso

urc

e m

ix

Planning Committee

Reliability Assessment Subcommittee

Integration of Variable Generation Task Force

Smart Grid Task Force

Ready industry for the changing resource mix and technology integration by providing guidance and input into NERCrsquos Reliability Standards

Unprecedented change in resource mix being realized through retirement of aging units capital fuel costs along with environmental regulations This change along with technological advances in communications and control can change the well understood character of the bulk power system requiring changes in the planning approaches to ensure operational reliability

Medium 1 IVGTF ndash addressing frequency voltage

response resource flexibility contingency reserves

2 SGTF ndash addressing reliability impacts 3 RIS-RAS - addressing scenarios resource

mix planning probabilistic assessments 4 Scenarios that address resource mix

implications such as natural gas interdependence

5 Evaluate benefit of probabilistic metrics and provide guidance to plannersoperators

6 Develop targetsmetricsrefinements for planningoperation

7 Provide guidance on tools for operators 8 Develop potential standards proposals

or guidanceadvisories that enhance reliability

9 Provide recommendations for expanded planning assessments to address resource mix changes

1 through 13 See Planning Committeersquos Strategic Plan

3

and Action Plan4

3 through 6 Resource Issues and Reliability Assessment Subcommittees

Annual Summer Reliability Assessment

Annual Winter Reliability Assessment

Annual Long-Term Reliability Assessment o Scenarios o Emerging Issues o Probabilistic

3 httpwwwnerccomdocspcAgendaItem_5a_PC_2011-2016_Strategic_Plan_v5_LINKpdf

4 httpwwwnerccomdocspcAgendaItem_5ai_PC_Strategic_Plan_Next20Steps2020Future20Work20Plan_v5_LINKpdf

Action Plan

Reliability Issues Coordinated Action Plan June 2011 10

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

6

Inte

grat

ion

of

new

te

chn

olo

gies

Planning Committee

Smart Grid Task Force

Reliability Assessment Subcommittee

10 Smart Grid impacts from distribution

systems (Address cyber aspects in 8 Non-Traditional Threats via Cyber-Security Vulnerabilities)

11 IVGTF dealing with distribution (renewables EV and conventional) resource integration

12 DRDTF addressing high levels of demand response integration

13 TIS and SPCS will provide guidance for modeling and controls systems managementcoordination

Assessment

7

Pre

par

edn

ess

for

hig

h

imp

act

low

fre

qu

ency

ev

ents

Planning Committee

Spare Equipment Database Task Force

Geomagnetic Disturbance Task Force

Operating Committee

Severe Impact Resilience Task Force

Critical Infrastructure Protection Committee

Cyber Attack Task Force

Address the risks from selected high impact low frequency events which can have unacceptable consequences on bulk power system reliability

The bulk power system has significant amounts of built-in resiliency However it has been planned and operated with the known risks to successfully manage system performance With changing threats from cyber physical and new facts about GMD industry will adjust their planning and operational activities to address these evolving risks

High 1 The Electricity Subsector Coordinating

Council has developed a BOT approved Critical Infrastructure Strategic Roadmap

5 in Q4 2010

2 The technical Committees have developed a Critical Infrastructure Strategic Initiatives Coordinated Action Plan

6 BOT approved in Q4 2010

1-2 Covered in the technical committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan

5 httpwwwnerccomdocsesccESCC_Critical_Infrastructure_Strategic_Roadmappdf

6 httpwwwnerccomdocsciscapCritical_Infrastructure_Strategic_Initiatives_Coordinated_Action_Plan_BOT_Apprd_11-2010pdf

Action Plan

Reliability Issues Coordinated Action Plan June 2011 11

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

8

No

n-t

rad

itio

nal

th

reat

s vi

a cy

ber

-se

curi

ty

vuln

erab

iliti

es

Critical Infrastructure Protection Committee

A resilient system fortified by industry planning and operational practices

The continuously evolving threat from cyber-security vulnerabilities requires new processes and procedures both for system planning and operations Industry awareness and cooperation with governmental jurisdictions are key aspects for this improved situational awareness

High

1 Also part of the deliverables in item 7 Preparedness for High Impact Low Frequency events

2 Metric development to measure cyber strength being developed with the Planning Committeersquos Smart Grid Task Force (SGTF)

3 Ongoing industry Alerts as required 4 Guidelines required to advise industry on

the establishment of appropriate cyber-security programs in their organizations

1 Covered in the technical

committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan

2 See Planning Committeersquos Strategic Plan and Action Plan along with the work plan for the SGTF

7

3 See NERCrsquos Alert website8

4 A subgroup formed to develop guidelines reviewing other industryrsquos to take advantage of existing knowledge 2012 Q4

7 httpwwwnerccomfilesSGTF_Report_Final_posted_v11pdf

8 httpwwwnerccompagephpcid=5|63

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

12

AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess

Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the

following list and abstract description was developed

1 Misoperations of relay protection and control systems ndash Nearly all major system failures

excluding perhaps those caused by severe weather have misoperations of relays or

automatic controls as a factor contributing to the propagation of the failure Protection

systems are designed to operate reliably when needed under the presence of a fault on the

system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without

allowing the fault to transfer into adjoining facilities The greater the number of facilities

involved in an event the more severe the impact to the rest of the bulk power system with

cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout

being the extreme Relays can misoperate either operate when not needed or fail to

operate when needed for a number of reasons First the device could experience an

internal failure ndash but this is rare Most commonly relays fail to operate correctly due to

incorrect settings improper coordination (of timing and set points) with other devices

ineffective maintenance and testing or failure of communications channels or power

supplies Preventable errors can be introduced by field personnel and their supervisors or

more programmatically by the organization Adding to the risk is that system protection is

an extremely complex engineering field ndashthere are many practitioners but few masters

2 Human errors by field personnel ndash Field personnel play an important role in the

maintenance and operation of the bulk power system They often are switching equipment

in and out of service and aligning alternative configurations Risks can be introduced when

field personnel operate equipment in a manner that reduces the redundancy of the bulk

power system sometimes even creating single points of failure that would not exist

normally Taking outages of equipment to conduct maintenance is a routine and necessary

part of reliable bulk power system operation However any alterations to the configuration

of the network must be carefully planned in advance to minimize loss of redundancy and

avoid unintended single points of failure It is also important that such changes and risks be

communicated to system operators and reliability coordinators in advance so that they can

make adjustments in their operating plans and reliability assessments

3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system

operators and reliability coordinators are comfortable with informal communications with

field and power plant personnel and neighboring systems Experience from analyzing

various events indicates there is often a sense of awkwardness when personnel transition

from conversational discussion to issuing reliability instructions It is also human nature to

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

13

be uncomfortable in applying formal communication procedures after personnel have

developed informal styles over many years Confusion in making the transition from normal

conversation to formal communications can introduce misunderstandings and possibly even

incorrect actions or assumptions Further once the need to transition to more formal

structure is recognized the transition is often not complete or effective Results can include

unclear instructions confusion whether an instruction is a suggestion or a directive whether

specific action is required or a set of alternative actions are permissible and confusion over

what elements of the system are being addressed

4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation

management programs as a key recommendation for avoiding future cascading failures

More broadly any encroachments in the right-of-way that reduce clearances to the point of

lowering facility ratings or reducing the randomness of possible contacts can be a risk to

reliability Although these impacts may not always be readily apparent under extreme wind

and temperature conditions they may become more of a risk to bulk power system

reliability There are many challenges to effective right-of-way maintenance especially

maintaining proper clearances including interventions by private landowners local

municipalities and federal and state landowners

5 Changing resource mix ndash Energy and environmental policies along with energy markets are

driving proposals toward unprecedented changes in the resource mix of the bulk power

system Examples include integration of significant amounts of renewable (variable such as

wind and solar) natural gas storage and demand resources to provide energy and capacity

Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a

century of operational experience with the existing resource mix However integration of

these new resources results in operating characteristics significantly different from

conventional steam production facilities An array of reliability services must be provided

over a range of time horizons from seconds to minutes to hours and days and annually such

as load following contingency reserves frequency response reactive supply capacity and

voltage control and power system stability Continued reliable operation of the bulk power

system will require an industry dialog with policymakers and regulators Understanding the

impacts on reliability will depend on accurate modeling of new resources and development

of new methods and tools for the provision of essential reliability services

6 Integration of new technologies ndash Introduction of electric vehicles demand-side

management variable generation distributed resources and smart grid technologies

presents tremendous opportunities but also introduces changes to the operating

characteristics of the bulk power system Integration of these new technologies requires

changes in the way the bulk power system is planned and operated to maintain reliability

Further additional toolsmodels are required to support their integration to meet policy and

strategic goals Without these changes it will be challenging to maintain reliability with

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

14

large-scale deployments For example some smart grid devicessystems increase exposure

to cyber threats while variable generation requires additional ancillary services Integration

of these new technologies must be achieved in a manner that does not undermine existing

levels of stability resilience and security of the bulk power system

7 Preparedness for high impact low frequency events ndash Although there is a wide range of

threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for

possible events that could debilitate the bulk power system for extended periods such as

widespread coordinated physicalcyber attacks or geomagnetic storms The industry must

consider improving the design of the bulk power system to address these potential risks and

prepare coordinated North American response plans for use during catastrophic events and

be ready to deploy those plans to restore essential services in a timely manner

8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-

based programs policies and processes to prepare for react to and recover from cyber

security vulnerabilities is a high priority for the industry The bulk power system has not yet

experienced wide-spread cyber-attacks and a contributing factor has been the traditional

physical separation between the industrial control systemSCADA environment and the

business and administrative networks This situation however is rapidly changing

predominantly due to the efficiencies that can be achieved by leveraging shared networks

and resources so now even physically separated environments are susceptible For example

the bulk power system could be as vulnerable to digital threats as IT systems but with far

more critical implications as the recent Stuxnet virus has shown Disabling or turning

systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial

control system software can be changed and data can be stolen without intrusions even

being detected These injection vectors serve as a blueprint for future attackers who wish to

access controllers safety systems and protection devices to insert malicious code targeting

changes to set points and switches as well as alteration or suppression of measurements

Standing Committee Coordination Group Roster

Reliability Issues Coordinated Action Plan

June 2011

15

SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr

Position

Name Title

Company City StateProvince

Phone E-mail

CCC Chair W Clay Smith

2100 East Exchange Place Tucker Georgia 30084-5336

(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom

CCC Vice Chair Terry L Bilke

Director Standards and Compliance

Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202

317 249-5463 317 249-5358 Fax tbilkemidwestisoorg

CCC Vice Chair Brett Hallborg

Manager of Operations Training

BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2

(604) 455-1778 bretthallborgbchydroc

om

CIPC Chair Barry Lawson

Manager Power Delivery

National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203

(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo

p

CIPC Vice Chair Cyber

Charles F Abell PE Supervising Engineer

Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103

(314) 554-3817 (314) 206-0046 Fx cfabellamerencom

CIPC Vice Chair Physical Security

Robert D Canada Business Assurance Principal

Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308

(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom

OC Chair JS Holeman

Director System Operations

Duke Energy

(704) 382-0011 SamHolemanduke-energycom

Action Plan

Reliability Issues Coordinated Action Plan June 2011 16

Position

Name Title

Company City StateProvince

Phone E-mail

OC Vice Chair Tom Bowe

Executive Director of Compliance

PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403

610-666-4776 (610) 666-4287 Fx bowetpjmcom

PC Chair Tom Burgess

Director FERC Compliance

FirstEnergy Corp

330-384-5225 burgesstfirstenergycorpcom

PC Vice Chair Jeffrey L Mitchell

Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333

(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg

PCGC Chair Jacob Burger

Transmission System Control Coordinator

Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832

(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom

SC Chair Allen Mosher

Senior Director of Policy Analysis and Reliability

American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715

(202) 467-2944 (202) 467-2992 Fx amosherappanetorg

SC Vice Chair PS (Ben) Li

President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6

(647) 388-1498 (905) 887-2235 Fx benbenlica

REMG Representative

Edward A Schwerdt President and CEO

Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703

(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg

NERC Staff Roster

Reliability Issues Coordinated Action Plan

June 2011

17

NNEERRCC SSttaaffff RRoosstteerr

Position

Name Title

PhoneE-mail

NERC Staff Alvin J (AJ) Connor

Manager of Power System Analysis (609) 751-2579 ajconnornercnet

NERC Staff Tom Galloway

Senior Vice President and Chief Reliability Officer

(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet

NERC Staff Brian M Harrell

Manager of CIP Standards Training and Awareness

(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet

NERC Staff Larry J Kezele

Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet

NERC Staff Mark G Lauby

Vice President and Director of Reliability Assessment and Performance Analysis

(609) 452-8060 (609) 452-9550 Fax marklaubynercnet

NERC Staff Maureen E Long

Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet

NERC Staff Scott R Mix

CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet

NERC Staff Michael Moon

Director of Compliance Operations

(404) 446-2560 michaelmoonnercnet

NERC Staff Andrew Rodriquez Director of Standards Development

(404) 446-2560 andyrodriqueznercnet

NERC Staff Peter Knoetgen Director of Training and Accreditation

404-446-9688 peterknoetgennercnet

NERC Staff Herb Schrayshuen

Vice President and Director of Standards

((315) 439-1390 herbschrayshuennercnet

NERC Staff Mark Weatherford

Vice President and Chief Security Officer

(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet

Introduction

Reliability Issues Coordinated Action Plan June 2011 1

IInnttrroodduuccttiioonn

Background

On January 7 2011 NERC announced a preliminary set of high priority reliability issues

intended to focus ERO program areas including standards setting compliance and training and

education1 Subsequent to this posting NERCrsquos technical and standing committees have

reviewed the identified elements provided suggestions and enhancements and have agreed to

work with stakeholders in accepting accountability for implementing an action plan addressing

these reliability issues This document provides an action plan towards addressing these

reliability issues including priorities and milestones

Top Priority Reliability Issues

The priority list is based partially on experience from reviewing actual system events (topics 1

to 4) and forward looking issues (topics 5 to 8) Though the reliability issues were offered as a

starting point for discussion with industry experts the standing committees believed them

important enough to develop this action plan In the next few years it is expected that new

reliability performance measures and root cause analysis methods being initiated by NERC will

further reinforce the setting of reliability priorities The goal is to develop a list of priorities to

focus work in the one to three year horizon on those areas most likely to have a positive impact

on bulk power system reliability The following high level list addresses technical issues and

does not enumerate policy matters that should be dealt with in alternative governance and

regulatory forums (See Appendix 1 for complete description)

1 Misoperations of relay protection and control systems

2 Human errors by field personnel

3 Ambiguous or incomplete voice communications

4 Right-of-way maintenance

5 Changing resource mix

6 Integration of new technologies

7 Preparedness for high impact low frequency events

8 Non-traditional threats via cyber security vulnerabilities

1 NERC Presidentrsquos Top Priority Issues for Bulk Power System Reliability httpwwwnerccomnews_prphpnpr=723 at httpwwwnerccomfileUploadsFileNewsNERC20President20Top20Priority20BPS20Reliability20Issues201-7-11pdf

Introduction

Reliability Issues Coordinated Action Plan June 2011 2

Roles ndash Reliability Issues Coordinated Action Plan

Since these reliability issues can functionally cross multiple committees coordination is

essential to the successful implementation of the Reliability Issues Coordinated Action Plan The

standing committees and NERC Staff have formulated a coordinated approach to ensure

effectiveness in implementation Figure 1 below provides the roles coordination points and

responsibilities of this coordination effort to support this Reliability Issues Coordinated Action

Plan

Figure 1 Roles ndash Reliability Issues Coordinated Action Plan

Introduction

Reliability Issues Coordinated Action Plan June 2011 3

Next Steps

Once lead standing committees are identified for each of the reliability issues and through

their usual processes they will then direct the appropriate sub-groups review and refine their

respective scopes and consider the needed resources deliverables and milestones In many

instances a subgroup is already in place working on one or more of these reliability issues If

no appropriate subgroup exists the standing committees will develop a draft scope and form a

subgroup to address the reliability issue Figure 2 below describes the work plan development

and implementation process

Figure 2 Work Plan Development and Implementation Process

Lead Standing Committee Identified

Develop Action Plan seek approval from Standing Committees and BOT

Direct appropriate Subgroup to Address Reliability Issue

Deliver on Milestones in Plan

Organization

Reliability Issues Coordinated Action Plan June 2011 4

OOrrggaanniizzaattiioonn

The Electric Reliability Organization (ERO) Strategic Goals through 2015 are summarized in the following key goals2

Goal 1 The ERO will have clear results-based reliability standards that provide for an

adequate level of bulk power system reliability

Goal 2 Bulk power system owners operators and users will demonstrate sustained

cultures of learning and reliability excellence built upon underlying foundations

of compliance and effective risk management and mitigation

Goal 3 The ERO will develop and maintain effective reliability performance measures

and will continue to develop high quality reliability assessments based on long

range and seasonal forecasts as well as emerging issues

Goal 4 Bulk power system owners operators and users will effectively manage risks

from cyber and physical attacks and other high-impact low-frequency events

Goal 5 The ERO will balance the role of being a strong independent enforcement

authority with one of providing owners operators and users timely and

transparent feedback on compliance and effective incentives for improving

reliability

Goal 6 NERC and the regional entities will execute statutory functions in a collaborative

enterprise and thereby achieve efficiencies and effective process controls while

leveraging the expertise of staff and reliability stakeholder resources

Goal 7 The ERO will maintain an exceptional reputation as the trusted leader of the

reliability community and instill a high degree of confidence in the reliability of

the bulk power system

Based on NERCrsquos Strategic Plan and the top priority Issues for bulk power system

reliability the standing committeersquos leadership and NERC staff have assigned lead

committees for each reliability issue and formulated deliverables priorities and

milestones (see Table 1)

2 February 17 2011 Board of Trustees agenda item 7 Electric Reliability Organization Strategic Goals through 2015 httpwwwnerccomdocsdocsbotBOT-0211a-completepdf

Organization

Reliability Issues Coordinated Action Plan June 2011 5

Table 1 Proposed LeadSupport NERC Staff and Standing Committees

Top Priority Issues

NERC Lead

Standing Committee Lead NERC Support

Standing Committee Support

1 M

iso

pe

rati

on

s o

f re

lay

pro

tect

ion

and

co

ntr

ol s

yste

ms

Long

Rodriquez

Connor

Cummings

Bian

Standards Committee

Standard Drafting Teams (SDTs) o Protection System Maintenance o Coordination of Protection

Systems o Generator Verification o Protection System

Misoperations

Planning Committee

System Protection amp Control Subcommittee

Reliability Metrics Working Group

Kezele

Moon

Operating Committee

Compliance and Certification Committee

2 H

um

an e

rro

rs b

y

fie

ld p

ers

on

ne

l

Galloway

Kezele

Operating Committee

Personnel Subcommittee

Long Rodriquez

Connor

Moon

Standards Committee

Reliability Coordination SDT

Operations Communications Protocols SDT

Planning Committee

Compliance and Certification Committee

3 A

mb

igu

ou

s o

r

inco

mp

lete

vo

ice

com

mu

nic

atio

n Galloway

Kezele

Operating Committee

Long Rodriquez

Connor

Moon

Standards Committee

Reliability Coordination SDT

Operations Communications Protocols SDT

Planning Committee

Compliance and Certification Committee

4 R

igh

t-o

f-w

ay

mai

nte

nan

ce Kezele

Carter Operating Committee Connor

Moon

Long Rodriquez

Planning Committee

Compliance and Certification Committee

Standards Committee

Vegetation Management SDT

5 C

han

gin

g

reso

urc

e m

ix

Connor Moura Moura

Moura

Planning Committee

Reliability Assessment Subcommittee

Integration of Variable Generation Task Force

Smart Grid Task Force

Kezele

Moon

Connor Moura

Bian Moura

Operating Committee

Compliance and Certification Committee

Planning Committee

Demand Response Data Task Force

TADSGADS

Smart Grid Task Force

Organization

Reliability Issues Coordinated Action Plan June 2011 6

Top Priority Issues

NERC Lead

Standing Committee Lead NERC Support

Standing Committee Support

6 I

nte

grat

ion

of

ne

w

tech

no

logi

es

Connor Moura Moura

Planning Committee

Smart Grid Task Force

Reliability Assessment Subcommittee

Mix

Moon

Kezele

Critical Infrastructure Protection Committee

Compliance and Certification Committee

Operating Committee

7 P

rep

are

dn

ess

fo

r h

igh

imp

act

low

fre

qu

en

cy e

ven

ts

Connor Bian

Moura

Kezele Kezele

Mix

Roxey

Planning Committee

Spare Equipment Database Task Force

Geomagnetic Disturbance Task Force

Operating Committee

Severe Impact Resilience Task Force

Critical Infrastructure Protection Committee

Cyber Attack Task Force

Moon Compliance and Certification Committee

8 N

on

-tra

dit

ion

al

thre

ats

via

cyb

er-

secu

rity

vuln

era

bili

tie

s

Mix Critical Infrastructure Protection Committee

Connor Moura

Kezele

Moon

Planning Committee

Smart Grid Task Force

Operating Committee

Compliance and Certification Committee

Action Plan

Reliability Issues Coordinated Action Plan

June 2011

7

AAccttiioonn PPllaann

The following Action Plan (Table 2) provides Proposed Enhancements Abstract of activity priorities key deliverables and projected milestones

Table 2 Reliability Issues Action Plan

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

1

Mis

op

erat

ion

s o

f re

lay

pro

tect

ion

an

d c

on

tro

l sys

tem

s

Standards Committee

NERC Reliability Standards

Prepare and achieve approval Reliability Standards that minimize relay control system misoperations

High 1 PRC-005 Protection System

Maintenance 2 PRC-004 Protection System Misoperation

Identification and Correction (Rapid Development Pilot)

3 PRC-024 Generator Performance During Frequency and Voltage Excursions

4 PRC-019 Coordination of Generator Voltage Regulator Controls with Unit Capabilities and Protection

5 PRC-001 Protection System Coordination

1 BOT eta Q3 2011 2 BOT eta Q2 2012 3 BOT eta Q2 2012

4 BOT eta Q4 2012

5 BOT eta Q1 2013

Planning Committee System Protection amp Control Subcommittee

Reliability Metrics Working Group

Provide tools for improvement and measure trends

Enhancing the available tools to planners and operators and measuring trends will support industry efforts to improve

High

1 Guidance for relay maintenance and adequacy of protection engineering

2 Metrics that measure relaycontrol system misoperation

1 SPCS deliver Guide Q2 2012

2 RMWG develops metrics Q4 2011 TADSWG collects data as needed

Low 3 Address ways to enhance operator trainingrelay knowledge

3 SPCS in collaboration with the OCrsquos Personnel Subcommittee deliver tutorial for OC review Q4 2013

2

Hu

man

er

rors

by

fiel

d

per

son

nel

Operating Committee Personnel Subcommittee

Developing root causes lessons learned and guidance on processes can shape industry improvement opportunities

Enhancing industry knowledge of failure modes can improve reliability Standard development on operator training can help ensure successful implementation of recommendations

High 1 Develop guidance for root cause aspects

ndash including planningmanagement decisions

2 Develop refined cause codes to capture root cause

3 Develop processes that lead to quicker sharing of lessons learned

4 Develop guidance on tools development (man‐machine interfacedesign)

1 EAWG develop root cause guidebook by Q4 2012

2 EAWG to develop cause codes by Q4 2013

3 EAWG to streamline lessons learned process by Q4 2011

4 RCWG to create tools development guidebook Q4 2014

Action Plan

Reliability Issues Coordinated Action Plan June 2011 8

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

Medium 5 Develop process guidance for task design

(process resolutions plan the work and work the plan)

6 Support Personnel Training Standard

5 Personnel Subcommittee to prioritize and develop task design guidance Q3 2012

6 Personnel Subcommittee to develop SAR by Q4 2012

3

Am

big

uo

us

or

inco

mp

lete

vo

ice

com

mu

nic

atio

n

Standards Committee NERC Reliability Standards

Prepare and approve Reliability Standards that address communications

High 1 COM-002-3 ndash Communications and

Coordination Standard 2 COM-003-1 ndash Operating Personnel

Communications Protocols Standard

1 BOT eta Q1 2012

2 BOT eta Q4 2012

Operating Committee

Measurably improved communications in system operations

Provide guidance clarifying for operators the role of communications in improvement of reliability Should be a subset of 2 (good practices training deliverables etc)

Medium 1 Use other industries for guidance 2 Provide guidance on the benefits of using

of standard operating language or good practices separate from three-part communications Clarify for operators when communications are mission critical and when prescriptive forms impede reliability

3 Provide clear interpretations of the relevant reliability standards so that there is certainty for directives and associated communication actions

1 RCWG investigates and documents other industryrsquos experience and use of communications Report Q4 2012

2 RCWG develops guidelines on benefits from standard communication approaches Detail the use of communications to improve while not reducing reliability Q3 2013

3 Operating Committee works with NERCrsquos Compliance Operations on Compliance Application Notices (CAN) to eliminate ambiguous terms used in operations Q2 2012

4

Rig

ht-

of-

way

m

ain

ten

ance

Operating Committee (Primary Technical Committee ndash not determined)

Measurably improved right-of-way maintenance

Ensure that ROW maintenance practices result incompliance with FAC-003-2 requirements thereby maintaining reliability

High 1 Document actions undertaken that

address the facility ratings Alert results Leverage the North American Transmission Forum work for planning calculationsratings

2 Provide guidance for operational coordination among operating units TOPs RCs and BAs for different situations

1 Subgroup formed in collaboration with NERC and the Regional Entities along with the North American Transmission forum to document the result of the FAC-003-2 plans to develop industry guidance and action Q4 2011

2 Subgroup should develop guidelines for coordination among TOPs RCs and BAs Q4 2012

Action Plan

Reliability Issues Coordinated Action Plan June 2011 9

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

Standards Committee NERC Reliability Standards

Prepare and achieve approval of Reliability Standard for Transmission Vegetation Management

Low 1 FAC-003-2 ndash Transmission Vegetation

Management 1 BOT eta Q3 2011

5

Ch

angi

ng

reso

urc

e m

ix

Planning Committee

Reliability Assessment Subcommittee

Integration of Variable Generation Task Force

Smart Grid Task Force

Ready industry for the changing resource mix and technology integration by providing guidance and input into NERCrsquos Reliability Standards

Unprecedented change in resource mix being realized through retirement of aging units capital fuel costs along with environmental regulations This change along with technological advances in communications and control can change the well understood character of the bulk power system requiring changes in the planning approaches to ensure operational reliability

Medium 1 IVGTF ndash addressing frequency voltage

response resource flexibility contingency reserves

2 SGTF ndash addressing reliability impacts 3 RIS-RAS - addressing scenarios resource

mix planning probabilistic assessments 4 Scenarios that address resource mix

implications such as natural gas interdependence

5 Evaluate benefit of probabilistic metrics and provide guidance to plannersoperators

6 Develop targetsmetricsrefinements for planningoperation

7 Provide guidance on tools for operators 8 Develop potential standards proposals

or guidanceadvisories that enhance reliability

9 Provide recommendations for expanded planning assessments to address resource mix changes

1 through 13 See Planning Committeersquos Strategic Plan

3

and Action Plan4

3 through 6 Resource Issues and Reliability Assessment Subcommittees

Annual Summer Reliability Assessment

Annual Winter Reliability Assessment

Annual Long-Term Reliability Assessment o Scenarios o Emerging Issues o Probabilistic

3 httpwwwnerccomdocspcAgendaItem_5a_PC_2011-2016_Strategic_Plan_v5_LINKpdf

4 httpwwwnerccomdocspcAgendaItem_5ai_PC_Strategic_Plan_Next20Steps2020Future20Work20Plan_v5_LINKpdf

Action Plan

Reliability Issues Coordinated Action Plan June 2011 10

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

6

Inte

grat

ion

of

new

te

chn

olo

gies

Planning Committee

Smart Grid Task Force

Reliability Assessment Subcommittee

10 Smart Grid impacts from distribution

systems (Address cyber aspects in 8 Non-Traditional Threats via Cyber-Security Vulnerabilities)

11 IVGTF dealing with distribution (renewables EV and conventional) resource integration

12 DRDTF addressing high levels of demand response integration

13 TIS and SPCS will provide guidance for modeling and controls systems managementcoordination

Assessment

7

Pre

par

edn

ess

for

hig

h

imp

act

low

fre

qu

ency

ev

ents

Planning Committee

Spare Equipment Database Task Force

Geomagnetic Disturbance Task Force

Operating Committee

Severe Impact Resilience Task Force

Critical Infrastructure Protection Committee

Cyber Attack Task Force

Address the risks from selected high impact low frequency events which can have unacceptable consequences on bulk power system reliability

The bulk power system has significant amounts of built-in resiliency However it has been planned and operated with the known risks to successfully manage system performance With changing threats from cyber physical and new facts about GMD industry will adjust their planning and operational activities to address these evolving risks

High 1 The Electricity Subsector Coordinating

Council has developed a BOT approved Critical Infrastructure Strategic Roadmap

5 in Q4 2010

2 The technical Committees have developed a Critical Infrastructure Strategic Initiatives Coordinated Action Plan

6 BOT approved in Q4 2010

1-2 Covered in the technical committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan

5 httpwwwnerccomdocsesccESCC_Critical_Infrastructure_Strategic_Roadmappdf

6 httpwwwnerccomdocsciscapCritical_Infrastructure_Strategic_Initiatives_Coordinated_Action_Plan_BOT_Apprd_11-2010pdf

Action Plan

Reliability Issues Coordinated Action Plan June 2011 11

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

8

No

n-t

rad

itio

nal

th

reat

s vi

a cy

ber

-se

curi

ty

vuln

erab

iliti

es

Critical Infrastructure Protection Committee

A resilient system fortified by industry planning and operational practices

The continuously evolving threat from cyber-security vulnerabilities requires new processes and procedures both for system planning and operations Industry awareness and cooperation with governmental jurisdictions are key aspects for this improved situational awareness

High

1 Also part of the deliverables in item 7 Preparedness for High Impact Low Frequency events

2 Metric development to measure cyber strength being developed with the Planning Committeersquos Smart Grid Task Force (SGTF)

3 Ongoing industry Alerts as required 4 Guidelines required to advise industry on

the establishment of appropriate cyber-security programs in their organizations

1 Covered in the technical

committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan

2 See Planning Committeersquos Strategic Plan and Action Plan along with the work plan for the SGTF

7

3 See NERCrsquos Alert website8

4 A subgroup formed to develop guidelines reviewing other industryrsquos to take advantage of existing knowledge 2012 Q4

7 httpwwwnerccomfilesSGTF_Report_Final_posted_v11pdf

8 httpwwwnerccompagephpcid=5|63

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

12

AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess

Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the

following list and abstract description was developed

1 Misoperations of relay protection and control systems ndash Nearly all major system failures

excluding perhaps those caused by severe weather have misoperations of relays or

automatic controls as a factor contributing to the propagation of the failure Protection

systems are designed to operate reliably when needed under the presence of a fault on the

system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without

allowing the fault to transfer into adjoining facilities The greater the number of facilities

involved in an event the more severe the impact to the rest of the bulk power system with

cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout

being the extreme Relays can misoperate either operate when not needed or fail to

operate when needed for a number of reasons First the device could experience an

internal failure ndash but this is rare Most commonly relays fail to operate correctly due to

incorrect settings improper coordination (of timing and set points) with other devices

ineffective maintenance and testing or failure of communications channels or power

supplies Preventable errors can be introduced by field personnel and their supervisors or

more programmatically by the organization Adding to the risk is that system protection is

an extremely complex engineering field ndashthere are many practitioners but few masters

2 Human errors by field personnel ndash Field personnel play an important role in the

maintenance and operation of the bulk power system They often are switching equipment

in and out of service and aligning alternative configurations Risks can be introduced when

field personnel operate equipment in a manner that reduces the redundancy of the bulk

power system sometimes even creating single points of failure that would not exist

normally Taking outages of equipment to conduct maintenance is a routine and necessary

part of reliable bulk power system operation However any alterations to the configuration

of the network must be carefully planned in advance to minimize loss of redundancy and

avoid unintended single points of failure It is also important that such changes and risks be

communicated to system operators and reliability coordinators in advance so that they can

make adjustments in their operating plans and reliability assessments

3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system

operators and reliability coordinators are comfortable with informal communications with

field and power plant personnel and neighboring systems Experience from analyzing

various events indicates there is often a sense of awkwardness when personnel transition

from conversational discussion to issuing reliability instructions It is also human nature to

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

13

be uncomfortable in applying formal communication procedures after personnel have

developed informal styles over many years Confusion in making the transition from normal

conversation to formal communications can introduce misunderstandings and possibly even

incorrect actions or assumptions Further once the need to transition to more formal

structure is recognized the transition is often not complete or effective Results can include

unclear instructions confusion whether an instruction is a suggestion or a directive whether

specific action is required or a set of alternative actions are permissible and confusion over

what elements of the system are being addressed

4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation

management programs as a key recommendation for avoiding future cascading failures

More broadly any encroachments in the right-of-way that reduce clearances to the point of

lowering facility ratings or reducing the randomness of possible contacts can be a risk to

reliability Although these impacts may not always be readily apparent under extreme wind

and temperature conditions they may become more of a risk to bulk power system

reliability There are many challenges to effective right-of-way maintenance especially

maintaining proper clearances including interventions by private landowners local

municipalities and federal and state landowners

5 Changing resource mix ndash Energy and environmental policies along with energy markets are

driving proposals toward unprecedented changes in the resource mix of the bulk power

system Examples include integration of significant amounts of renewable (variable such as

wind and solar) natural gas storage and demand resources to provide energy and capacity

Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a

century of operational experience with the existing resource mix However integration of

these new resources results in operating characteristics significantly different from

conventional steam production facilities An array of reliability services must be provided

over a range of time horizons from seconds to minutes to hours and days and annually such

as load following contingency reserves frequency response reactive supply capacity and

voltage control and power system stability Continued reliable operation of the bulk power

system will require an industry dialog with policymakers and regulators Understanding the

impacts on reliability will depend on accurate modeling of new resources and development

of new methods and tools for the provision of essential reliability services

6 Integration of new technologies ndash Introduction of electric vehicles demand-side

management variable generation distributed resources and smart grid technologies

presents tremendous opportunities but also introduces changes to the operating

characteristics of the bulk power system Integration of these new technologies requires

changes in the way the bulk power system is planned and operated to maintain reliability

Further additional toolsmodels are required to support their integration to meet policy and

strategic goals Without these changes it will be challenging to maintain reliability with

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

14

large-scale deployments For example some smart grid devicessystems increase exposure

to cyber threats while variable generation requires additional ancillary services Integration

of these new technologies must be achieved in a manner that does not undermine existing

levels of stability resilience and security of the bulk power system

7 Preparedness for high impact low frequency events ndash Although there is a wide range of

threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for

possible events that could debilitate the bulk power system for extended periods such as

widespread coordinated physicalcyber attacks or geomagnetic storms The industry must

consider improving the design of the bulk power system to address these potential risks and

prepare coordinated North American response plans for use during catastrophic events and

be ready to deploy those plans to restore essential services in a timely manner

8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-

based programs policies and processes to prepare for react to and recover from cyber

security vulnerabilities is a high priority for the industry The bulk power system has not yet

experienced wide-spread cyber-attacks and a contributing factor has been the traditional

physical separation between the industrial control systemSCADA environment and the

business and administrative networks This situation however is rapidly changing

predominantly due to the efficiencies that can be achieved by leveraging shared networks

and resources so now even physically separated environments are susceptible For example

the bulk power system could be as vulnerable to digital threats as IT systems but with far

more critical implications as the recent Stuxnet virus has shown Disabling or turning

systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial

control system software can be changed and data can be stolen without intrusions even

being detected These injection vectors serve as a blueprint for future attackers who wish to

access controllers safety systems and protection devices to insert malicious code targeting

changes to set points and switches as well as alteration or suppression of measurements

Standing Committee Coordination Group Roster

Reliability Issues Coordinated Action Plan

June 2011

15

SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr

Position

Name Title

Company City StateProvince

Phone E-mail

CCC Chair W Clay Smith

2100 East Exchange Place Tucker Georgia 30084-5336

(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom

CCC Vice Chair Terry L Bilke

Director Standards and Compliance

Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202

317 249-5463 317 249-5358 Fax tbilkemidwestisoorg

CCC Vice Chair Brett Hallborg

Manager of Operations Training

BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2

(604) 455-1778 bretthallborgbchydroc

om

CIPC Chair Barry Lawson

Manager Power Delivery

National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203

(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo

p

CIPC Vice Chair Cyber

Charles F Abell PE Supervising Engineer

Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103

(314) 554-3817 (314) 206-0046 Fx cfabellamerencom

CIPC Vice Chair Physical Security

Robert D Canada Business Assurance Principal

Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308

(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom

OC Chair JS Holeman

Director System Operations

Duke Energy

(704) 382-0011 SamHolemanduke-energycom

Action Plan

Reliability Issues Coordinated Action Plan June 2011 16

Position

Name Title

Company City StateProvince

Phone E-mail

OC Vice Chair Tom Bowe

Executive Director of Compliance

PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403

610-666-4776 (610) 666-4287 Fx bowetpjmcom

PC Chair Tom Burgess

Director FERC Compliance

FirstEnergy Corp

330-384-5225 burgesstfirstenergycorpcom

PC Vice Chair Jeffrey L Mitchell

Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333

(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg

PCGC Chair Jacob Burger

Transmission System Control Coordinator

Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832

(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom

SC Chair Allen Mosher

Senior Director of Policy Analysis and Reliability

American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715

(202) 467-2944 (202) 467-2992 Fx amosherappanetorg

SC Vice Chair PS (Ben) Li

President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6

(647) 388-1498 (905) 887-2235 Fx benbenlica

REMG Representative

Edward A Schwerdt President and CEO

Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703

(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg

NERC Staff Roster

Reliability Issues Coordinated Action Plan

June 2011

17

NNEERRCC SSttaaffff RRoosstteerr

Position

Name Title

PhoneE-mail

NERC Staff Alvin J (AJ) Connor

Manager of Power System Analysis (609) 751-2579 ajconnornercnet

NERC Staff Tom Galloway

Senior Vice President and Chief Reliability Officer

(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet

NERC Staff Brian M Harrell

Manager of CIP Standards Training and Awareness

(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet

NERC Staff Larry J Kezele

Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet

NERC Staff Mark G Lauby

Vice President and Director of Reliability Assessment and Performance Analysis

(609) 452-8060 (609) 452-9550 Fax marklaubynercnet

NERC Staff Maureen E Long

Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet

NERC Staff Scott R Mix

CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet

NERC Staff Michael Moon

Director of Compliance Operations

(404) 446-2560 michaelmoonnercnet

NERC Staff Andrew Rodriquez Director of Standards Development

(404) 446-2560 andyrodriqueznercnet

NERC Staff Peter Knoetgen Director of Training and Accreditation

404-446-9688 peterknoetgennercnet

NERC Staff Herb Schrayshuen

Vice President and Director of Standards

((315) 439-1390 herbschrayshuennercnet

NERC Staff Mark Weatherford

Vice President and Chief Security Officer

(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet

Introduction

Reliability Issues Coordinated Action Plan June 2011 2

Roles ndash Reliability Issues Coordinated Action Plan

Since these reliability issues can functionally cross multiple committees coordination is

essential to the successful implementation of the Reliability Issues Coordinated Action Plan The

standing committees and NERC Staff have formulated a coordinated approach to ensure

effectiveness in implementation Figure 1 below provides the roles coordination points and

responsibilities of this coordination effort to support this Reliability Issues Coordinated Action

Plan

Figure 1 Roles ndash Reliability Issues Coordinated Action Plan

Introduction

Reliability Issues Coordinated Action Plan June 2011 3

Next Steps

Once lead standing committees are identified for each of the reliability issues and through

their usual processes they will then direct the appropriate sub-groups review and refine their

respective scopes and consider the needed resources deliverables and milestones In many

instances a subgroup is already in place working on one or more of these reliability issues If

no appropriate subgroup exists the standing committees will develop a draft scope and form a

subgroup to address the reliability issue Figure 2 below describes the work plan development

and implementation process

Figure 2 Work Plan Development and Implementation Process

Lead Standing Committee Identified

Develop Action Plan seek approval from Standing Committees and BOT

Direct appropriate Subgroup to Address Reliability Issue

Deliver on Milestones in Plan

Organization

Reliability Issues Coordinated Action Plan June 2011 4

OOrrggaanniizzaattiioonn

The Electric Reliability Organization (ERO) Strategic Goals through 2015 are summarized in the following key goals2

Goal 1 The ERO will have clear results-based reliability standards that provide for an

adequate level of bulk power system reliability

Goal 2 Bulk power system owners operators and users will demonstrate sustained

cultures of learning and reliability excellence built upon underlying foundations

of compliance and effective risk management and mitigation

Goal 3 The ERO will develop and maintain effective reliability performance measures

and will continue to develop high quality reliability assessments based on long

range and seasonal forecasts as well as emerging issues

Goal 4 Bulk power system owners operators and users will effectively manage risks

from cyber and physical attacks and other high-impact low-frequency events

Goal 5 The ERO will balance the role of being a strong independent enforcement

authority with one of providing owners operators and users timely and

transparent feedback on compliance and effective incentives for improving

reliability

Goal 6 NERC and the regional entities will execute statutory functions in a collaborative

enterprise and thereby achieve efficiencies and effective process controls while

leveraging the expertise of staff and reliability stakeholder resources

Goal 7 The ERO will maintain an exceptional reputation as the trusted leader of the

reliability community and instill a high degree of confidence in the reliability of

the bulk power system

Based on NERCrsquos Strategic Plan and the top priority Issues for bulk power system

reliability the standing committeersquos leadership and NERC staff have assigned lead

committees for each reliability issue and formulated deliverables priorities and

milestones (see Table 1)

2 February 17 2011 Board of Trustees agenda item 7 Electric Reliability Organization Strategic Goals through 2015 httpwwwnerccomdocsdocsbotBOT-0211a-completepdf

Organization

Reliability Issues Coordinated Action Plan June 2011 5

Table 1 Proposed LeadSupport NERC Staff and Standing Committees

Top Priority Issues

NERC Lead

Standing Committee Lead NERC Support

Standing Committee Support

1 M

iso

pe

rati

on

s o

f re

lay

pro

tect

ion

and

co

ntr

ol s

yste

ms

Long

Rodriquez

Connor

Cummings

Bian

Standards Committee

Standard Drafting Teams (SDTs) o Protection System Maintenance o Coordination of Protection

Systems o Generator Verification o Protection System

Misoperations

Planning Committee

System Protection amp Control Subcommittee

Reliability Metrics Working Group

Kezele

Moon

Operating Committee

Compliance and Certification Committee

2 H

um

an e

rro

rs b

y

fie

ld p

ers

on

ne

l

Galloway

Kezele

Operating Committee

Personnel Subcommittee

Long Rodriquez

Connor

Moon

Standards Committee

Reliability Coordination SDT

Operations Communications Protocols SDT

Planning Committee

Compliance and Certification Committee

3 A

mb

igu

ou

s o

r

inco

mp

lete

vo

ice

com

mu

nic

atio

n Galloway

Kezele

Operating Committee

Long Rodriquez

Connor

Moon

Standards Committee

Reliability Coordination SDT

Operations Communications Protocols SDT

Planning Committee

Compliance and Certification Committee

4 R

igh

t-o

f-w

ay

mai

nte

nan

ce Kezele

Carter Operating Committee Connor

Moon

Long Rodriquez

Planning Committee

Compliance and Certification Committee

Standards Committee

Vegetation Management SDT

5 C

han

gin

g

reso

urc

e m

ix

Connor Moura Moura

Moura

Planning Committee

Reliability Assessment Subcommittee

Integration of Variable Generation Task Force

Smart Grid Task Force

Kezele

Moon

Connor Moura

Bian Moura

Operating Committee

Compliance and Certification Committee

Planning Committee

Demand Response Data Task Force

TADSGADS

Smart Grid Task Force

Organization

Reliability Issues Coordinated Action Plan June 2011 6

Top Priority Issues

NERC Lead

Standing Committee Lead NERC Support

Standing Committee Support

6 I

nte

grat

ion

of

ne

w

tech

no

logi

es

Connor Moura Moura

Planning Committee

Smart Grid Task Force

Reliability Assessment Subcommittee

Mix

Moon

Kezele

Critical Infrastructure Protection Committee

Compliance and Certification Committee

Operating Committee

7 P

rep

are

dn

ess

fo

r h

igh

imp

act

low

fre

qu

en

cy e

ven

ts

Connor Bian

Moura

Kezele Kezele

Mix

Roxey

Planning Committee

Spare Equipment Database Task Force

Geomagnetic Disturbance Task Force

Operating Committee

Severe Impact Resilience Task Force

Critical Infrastructure Protection Committee

Cyber Attack Task Force

Moon Compliance and Certification Committee

8 N

on

-tra

dit

ion

al

thre

ats

via

cyb

er-

secu

rity

vuln

era

bili

tie

s

Mix Critical Infrastructure Protection Committee

Connor Moura

Kezele

Moon

Planning Committee

Smart Grid Task Force

Operating Committee

Compliance and Certification Committee

Action Plan

Reliability Issues Coordinated Action Plan

June 2011

7

AAccttiioonn PPllaann

The following Action Plan (Table 2) provides Proposed Enhancements Abstract of activity priorities key deliverables and projected milestones

Table 2 Reliability Issues Action Plan

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

1

Mis

op

erat

ion

s o

f re

lay

pro

tect

ion

an

d c

on

tro

l sys

tem

s

Standards Committee

NERC Reliability Standards

Prepare and achieve approval Reliability Standards that minimize relay control system misoperations

High 1 PRC-005 Protection System

Maintenance 2 PRC-004 Protection System Misoperation

Identification and Correction (Rapid Development Pilot)

3 PRC-024 Generator Performance During Frequency and Voltage Excursions

4 PRC-019 Coordination of Generator Voltage Regulator Controls with Unit Capabilities and Protection

5 PRC-001 Protection System Coordination

1 BOT eta Q3 2011 2 BOT eta Q2 2012 3 BOT eta Q2 2012

4 BOT eta Q4 2012

5 BOT eta Q1 2013

Planning Committee System Protection amp Control Subcommittee

Reliability Metrics Working Group

Provide tools for improvement and measure trends

Enhancing the available tools to planners and operators and measuring trends will support industry efforts to improve

High

1 Guidance for relay maintenance and adequacy of protection engineering

2 Metrics that measure relaycontrol system misoperation

1 SPCS deliver Guide Q2 2012

2 RMWG develops metrics Q4 2011 TADSWG collects data as needed

Low 3 Address ways to enhance operator trainingrelay knowledge

3 SPCS in collaboration with the OCrsquos Personnel Subcommittee deliver tutorial for OC review Q4 2013

2

Hu

man

er

rors

by

fiel

d

per

son

nel

Operating Committee Personnel Subcommittee

Developing root causes lessons learned and guidance on processes can shape industry improvement opportunities

Enhancing industry knowledge of failure modes can improve reliability Standard development on operator training can help ensure successful implementation of recommendations

High 1 Develop guidance for root cause aspects

ndash including planningmanagement decisions

2 Develop refined cause codes to capture root cause

3 Develop processes that lead to quicker sharing of lessons learned

4 Develop guidance on tools development (man‐machine interfacedesign)

1 EAWG develop root cause guidebook by Q4 2012

2 EAWG to develop cause codes by Q4 2013

3 EAWG to streamline lessons learned process by Q4 2011

4 RCWG to create tools development guidebook Q4 2014

Action Plan

Reliability Issues Coordinated Action Plan June 2011 8

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

Medium 5 Develop process guidance for task design

(process resolutions plan the work and work the plan)

6 Support Personnel Training Standard

5 Personnel Subcommittee to prioritize and develop task design guidance Q3 2012

6 Personnel Subcommittee to develop SAR by Q4 2012

3

Am

big

uo

us

or

inco

mp

lete

vo

ice

com

mu

nic

atio

n

Standards Committee NERC Reliability Standards

Prepare and approve Reliability Standards that address communications

High 1 COM-002-3 ndash Communications and

Coordination Standard 2 COM-003-1 ndash Operating Personnel

Communications Protocols Standard

1 BOT eta Q1 2012

2 BOT eta Q4 2012

Operating Committee

Measurably improved communications in system operations

Provide guidance clarifying for operators the role of communications in improvement of reliability Should be a subset of 2 (good practices training deliverables etc)

Medium 1 Use other industries for guidance 2 Provide guidance on the benefits of using

of standard operating language or good practices separate from three-part communications Clarify for operators when communications are mission critical and when prescriptive forms impede reliability

3 Provide clear interpretations of the relevant reliability standards so that there is certainty for directives and associated communication actions

1 RCWG investigates and documents other industryrsquos experience and use of communications Report Q4 2012

2 RCWG develops guidelines on benefits from standard communication approaches Detail the use of communications to improve while not reducing reliability Q3 2013

3 Operating Committee works with NERCrsquos Compliance Operations on Compliance Application Notices (CAN) to eliminate ambiguous terms used in operations Q2 2012

4

Rig

ht-

of-

way

m

ain

ten

ance

Operating Committee (Primary Technical Committee ndash not determined)

Measurably improved right-of-way maintenance

Ensure that ROW maintenance practices result incompliance with FAC-003-2 requirements thereby maintaining reliability

High 1 Document actions undertaken that

address the facility ratings Alert results Leverage the North American Transmission Forum work for planning calculationsratings

2 Provide guidance for operational coordination among operating units TOPs RCs and BAs for different situations

1 Subgroup formed in collaboration with NERC and the Regional Entities along with the North American Transmission forum to document the result of the FAC-003-2 plans to develop industry guidance and action Q4 2011

2 Subgroup should develop guidelines for coordination among TOPs RCs and BAs Q4 2012

Action Plan

Reliability Issues Coordinated Action Plan June 2011 9

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

Standards Committee NERC Reliability Standards

Prepare and achieve approval of Reliability Standard for Transmission Vegetation Management

Low 1 FAC-003-2 ndash Transmission Vegetation

Management 1 BOT eta Q3 2011

5

Ch

angi

ng

reso

urc

e m

ix

Planning Committee

Reliability Assessment Subcommittee

Integration of Variable Generation Task Force

Smart Grid Task Force

Ready industry for the changing resource mix and technology integration by providing guidance and input into NERCrsquos Reliability Standards

Unprecedented change in resource mix being realized through retirement of aging units capital fuel costs along with environmental regulations This change along with technological advances in communications and control can change the well understood character of the bulk power system requiring changes in the planning approaches to ensure operational reliability

Medium 1 IVGTF ndash addressing frequency voltage

response resource flexibility contingency reserves

2 SGTF ndash addressing reliability impacts 3 RIS-RAS - addressing scenarios resource

mix planning probabilistic assessments 4 Scenarios that address resource mix

implications such as natural gas interdependence

5 Evaluate benefit of probabilistic metrics and provide guidance to plannersoperators

6 Develop targetsmetricsrefinements for planningoperation

7 Provide guidance on tools for operators 8 Develop potential standards proposals

or guidanceadvisories that enhance reliability

9 Provide recommendations for expanded planning assessments to address resource mix changes

1 through 13 See Planning Committeersquos Strategic Plan

3

and Action Plan4

3 through 6 Resource Issues and Reliability Assessment Subcommittees

Annual Summer Reliability Assessment

Annual Winter Reliability Assessment

Annual Long-Term Reliability Assessment o Scenarios o Emerging Issues o Probabilistic

3 httpwwwnerccomdocspcAgendaItem_5a_PC_2011-2016_Strategic_Plan_v5_LINKpdf

4 httpwwwnerccomdocspcAgendaItem_5ai_PC_Strategic_Plan_Next20Steps2020Future20Work20Plan_v5_LINKpdf

Action Plan

Reliability Issues Coordinated Action Plan June 2011 10

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

6

Inte

grat

ion

of

new

te

chn

olo

gies

Planning Committee

Smart Grid Task Force

Reliability Assessment Subcommittee

10 Smart Grid impacts from distribution

systems (Address cyber aspects in 8 Non-Traditional Threats via Cyber-Security Vulnerabilities)

11 IVGTF dealing with distribution (renewables EV and conventional) resource integration

12 DRDTF addressing high levels of demand response integration

13 TIS and SPCS will provide guidance for modeling and controls systems managementcoordination

Assessment

7

Pre

par

edn

ess

for

hig

h

imp

act

low

fre

qu

ency

ev

ents

Planning Committee

Spare Equipment Database Task Force

Geomagnetic Disturbance Task Force

Operating Committee

Severe Impact Resilience Task Force

Critical Infrastructure Protection Committee

Cyber Attack Task Force

Address the risks from selected high impact low frequency events which can have unacceptable consequences on bulk power system reliability

The bulk power system has significant amounts of built-in resiliency However it has been planned and operated with the known risks to successfully manage system performance With changing threats from cyber physical and new facts about GMD industry will adjust their planning and operational activities to address these evolving risks

High 1 The Electricity Subsector Coordinating

Council has developed a BOT approved Critical Infrastructure Strategic Roadmap

5 in Q4 2010

2 The technical Committees have developed a Critical Infrastructure Strategic Initiatives Coordinated Action Plan

6 BOT approved in Q4 2010

1-2 Covered in the technical committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan

5 httpwwwnerccomdocsesccESCC_Critical_Infrastructure_Strategic_Roadmappdf

6 httpwwwnerccomdocsciscapCritical_Infrastructure_Strategic_Initiatives_Coordinated_Action_Plan_BOT_Apprd_11-2010pdf

Action Plan

Reliability Issues Coordinated Action Plan June 2011 11

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

8

No

n-t

rad

itio

nal

th

reat

s vi

a cy

ber

-se

curi

ty

vuln

erab

iliti

es

Critical Infrastructure Protection Committee

A resilient system fortified by industry planning and operational practices

The continuously evolving threat from cyber-security vulnerabilities requires new processes and procedures both for system planning and operations Industry awareness and cooperation with governmental jurisdictions are key aspects for this improved situational awareness

High

1 Also part of the deliverables in item 7 Preparedness for High Impact Low Frequency events

2 Metric development to measure cyber strength being developed with the Planning Committeersquos Smart Grid Task Force (SGTF)

3 Ongoing industry Alerts as required 4 Guidelines required to advise industry on

the establishment of appropriate cyber-security programs in their organizations

1 Covered in the technical

committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan

2 See Planning Committeersquos Strategic Plan and Action Plan along with the work plan for the SGTF

7

3 See NERCrsquos Alert website8

4 A subgroup formed to develop guidelines reviewing other industryrsquos to take advantage of existing knowledge 2012 Q4

7 httpwwwnerccomfilesSGTF_Report_Final_posted_v11pdf

8 httpwwwnerccompagephpcid=5|63

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

12

AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess

Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the

following list and abstract description was developed

1 Misoperations of relay protection and control systems ndash Nearly all major system failures

excluding perhaps those caused by severe weather have misoperations of relays or

automatic controls as a factor contributing to the propagation of the failure Protection

systems are designed to operate reliably when needed under the presence of a fault on the

system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without

allowing the fault to transfer into adjoining facilities The greater the number of facilities

involved in an event the more severe the impact to the rest of the bulk power system with

cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout

being the extreme Relays can misoperate either operate when not needed or fail to

operate when needed for a number of reasons First the device could experience an

internal failure ndash but this is rare Most commonly relays fail to operate correctly due to

incorrect settings improper coordination (of timing and set points) with other devices

ineffective maintenance and testing or failure of communications channels or power

supplies Preventable errors can be introduced by field personnel and their supervisors or

more programmatically by the organization Adding to the risk is that system protection is

an extremely complex engineering field ndashthere are many practitioners but few masters

2 Human errors by field personnel ndash Field personnel play an important role in the

maintenance and operation of the bulk power system They often are switching equipment

in and out of service and aligning alternative configurations Risks can be introduced when

field personnel operate equipment in a manner that reduces the redundancy of the bulk

power system sometimes even creating single points of failure that would not exist

normally Taking outages of equipment to conduct maintenance is a routine and necessary

part of reliable bulk power system operation However any alterations to the configuration

of the network must be carefully planned in advance to minimize loss of redundancy and

avoid unintended single points of failure It is also important that such changes and risks be

communicated to system operators and reliability coordinators in advance so that they can

make adjustments in their operating plans and reliability assessments

3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system

operators and reliability coordinators are comfortable with informal communications with

field and power plant personnel and neighboring systems Experience from analyzing

various events indicates there is often a sense of awkwardness when personnel transition

from conversational discussion to issuing reliability instructions It is also human nature to

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

13

be uncomfortable in applying formal communication procedures after personnel have

developed informal styles over many years Confusion in making the transition from normal

conversation to formal communications can introduce misunderstandings and possibly even

incorrect actions or assumptions Further once the need to transition to more formal

structure is recognized the transition is often not complete or effective Results can include

unclear instructions confusion whether an instruction is a suggestion or a directive whether

specific action is required or a set of alternative actions are permissible and confusion over

what elements of the system are being addressed

4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation

management programs as a key recommendation for avoiding future cascading failures

More broadly any encroachments in the right-of-way that reduce clearances to the point of

lowering facility ratings or reducing the randomness of possible contacts can be a risk to

reliability Although these impacts may not always be readily apparent under extreme wind

and temperature conditions they may become more of a risk to bulk power system

reliability There are many challenges to effective right-of-way maintenance especially

maintaining proper clearances including interventions by private landowners local

municipalities and federal and state landowners

5 Changing resource mix ndash Energy and environmental policies along with energy markets are

driving proposals toward unprecedented changes in the resource mix of the bulk power

system Examples include integration of significant amounts of renewable (variable such as

wind and solar) natural gas storage and demand resources to provide energy and capacity

Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a

century of operational experience with the existing resource mix However integration of

these new resources results in operating characteristics significantly different from

conventional steam production facilities An array of reliability services must be provided

over a range of time horizons from seconds to minutes to hours and days and annually such

as load following contingency reserves frequency response reactive supply capacity and

voltage control and power system stability Continued reliable operation of the bulk power

system will require an industry dialog with policymakers and regulators Understanding the

impacts on reliability will depend on accurate modeling of new resources and development

of new methods and tools for the provision of essential reliability services

6 Integration of new technologies ndash Introduction of electric vehicles demand-side

management variable generation distributed resources and smart grid technologies

presents tremendous opportunities but also introduces changes to the operating

characteristics of the bulk power system Integration of these new technologies requires

changes in the way the bulk power system is planned and operated to maintain reliability

Further additional toolsmodels are required to support their integration to meet policy and

strategic goals Without these changes it will be challenging to maintain reliability with

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

14

large-scale deployments For example some smart grid devicessystems increase exposure

to cyber threats while variable generation requires additional ancillary services Integration

of these new technologies must be achieved in a manner that does not undermine existing

levels of stability resilience and security of the bulk power system

7 Preparedness for high impact low frequency events ndash Although there is a wide range of

threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for

possible events that could debilitate the bulk power system for extended periods such as

widespread coordinated physicalcyber attacks or geomagnetic storms The industry must

consider improving the design of the bulk power system to address these potential risks and

prepare coordinated North American response plans for use during catastrophic events and

be ready to deploy those plans to restore essential services in a timely manner

8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-

based programs policies and processes to prepare for react to and recover from cyber

security vulnerabilities is a high priority for the industry The bulk power system has not yet

experienced wide-spread cyber-attacks and a contributing factor has been the traditional

physical separation between the industrial control systemSCADA environment and the

business and administrative networks This situation however is rapidly changing

predominantly due to the efficiencies that can be achieved by leveraging shared networks

and resources so now even physically separated environments are susceptible For example

the bulk power system could be as vulnerable to digital threats as IT systems but with far

more critical implications as the recent Stuxnet virus has shown Disabling or turning

systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial

control system software can be changed and data can be stolen without intrusions even

being detected These injection vectors serve as a blueprint for future attackers who wish to

access controllers safety systems and protection devices to insert malicious code targeting

changes to set points and switches as well as alteration or suppression of measurements

Standing Committee Coordination Group Roster

Reliability Issues Coordinated Action Plan

June 2011

15

SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr

Position

Name Title

Company City StateProvince

Phone E-mail

CCC Chair W Clay Smith

2100 East Exchange Place Tucker Georgia 30084-5336

(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom

CCC Vice Chair Terry L Bilke

Director Standards and Compliance

Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202

317 249-5463 317 249-5358 Fax tbilkemidwestisoorg

CCC Vice Chair Brett Hallborg

Manager of Operations Training

BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2

(604) 455-1778 bretthallborgbchydroc

om

CIPC Chair Barry Lawson

Manager Power Delivery

National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203

(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo

p

CIPC Vice Chair Cyber

Charles F Abell PE Supervising Engineer

Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103

(314) 554-3817 (314) 206-0046 Fx cfabellamerencom

CIPC Vice Chair Physical Security

Robert D Canada Business Assurance Principal

Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308

(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom

OC Chair JS Holeman

Director System Operations

Duke Energy

(704) 382-0011 SamHolemanduke-energycom

Action Plan

Reliability Issues Coordinated Action Plan June 2011 16

Position

Name Title

Company City StateProvince

Phone E-mail

OC Vice Chair Tom Bowe

Executive Director of Compliance

PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403

610-666-4776 (610) 666-4287 Fx bowetpjmcom

PC Chair Tom Burgess

Director FERC Compliance

FirstEnergy Corp

330-384-5225 burgesstfirstenergycorpcom

PC Vice Chair Jeffrey L Mitchell

Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333

(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg

PCGC Chair Jacob Burger

Transmission System Control Coordinator

Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832

(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom

SC Chair Allen Mosher

Senior Director of Policy Analysis and Reliability

American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715

(202) 467-2944 (202) 467-2992 Fx amosherappanetorg

SC Vice Chair PS (Ben) Li

President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6

(647) 388-1498 (905) 887-2235 Fx benbenlica

REMG Representative

Edward A Schwerdt President and CEO

Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703

(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg

NERC Staff Roster

Reliability Issues Coordinated Action Plan

June 2011

17

NNEERRCC SSttaaffff RRoosstteerr

Position

Name Title

PhoneE-mail

NERC Staff Alvin J (AJ) Connor

Manager of Power System Analysis (609) 751-2579 ajconnornercnet

NERC Staff Tom Galloway

Senior Vice President and Chief Reliability Officer

(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet

NERC Staff Brian M Harrell

Manager of CIP Standards Training and Awareness

(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet

NERC Staff Larry J Kezele

Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet

NERC Staff Mark G Lauby

Vice President and Director of Reliability Assessment and Performance Analysis

(609) 452-8060 (609) 452-9550 Fax marklaubynercnet

NERC Staff Maureen E Long

Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet

NERC Staff Scott R Mix

CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet

NERC Staff Michael Moon

Director of Compliance Operations

(404) 446-2560 michaelmoonnercnet

NERC Staff Andrew Rodriquez Director of Standards Development

(404) 446-2560 andyrodriqueznercnet

NERC Staff Peter Knoetgen Director of Training and Accreditation

404-446-9688 peterknoetgennercnet

NERC Staff Herb Schrayshuen

Vice President and Director of Standards

((315) 439-1390 herbschrayshuennercnet

NERC Staff Mark Weatherford

Vice President and Chief Security Officer

(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet

Introduction

Reliability Issues Coordinated Action Plan June 2011 3

Next Steps

Once lead standing committees are identified for each of the reliability issues and through

their usual processes they will then direct the appropriate sub-groups review and refine their

respective scopes and consider the needed resources deliverables and milestones In many

instances a subgroup is already in place working on one or more of these reliability issues If

no appropriate subgroup exists the standing committees will develop a draft scope and form a

subgroup to address the reliability issue Figure 2 below describes the work plan development

and implementation process

Figure 2 Work Plan Development and Implementation Process

Lead Standing Committee Identified

Develop Action Plan seek approval from Standing Committees and BOT

Direct appropriate Subgroup to Address Reliability Issue

Deliver on Milestones in Plan

Organization

Reliability Issues Coordinated Action Plan June 2011 4

OOrrggaanniizzaattiioonn

The Electric Reliability Organization (ERO) Strategic Goals through 2015 are summarized in the following key goals2

Goal 1 The ERO will have clear results-based reliability standards that provide for an

adequate level of bulk power system reliability

Goal 2 Bulk power system owners operators and users will demonstrate sustained

cultures of learning and reliability excellence built upon underlying foundations

of compliance and effective risk management and mitigation

Goal 3 The ERO will develop and maintain effective reliability performance measures

and will continue to develop high quality reliability assessments based on long

range and seasonal forecasts as well as emerging issues

Goal 4 Bulk power system owners operators and users will effectively manage risks

from cyber and physical attacks and other high-impact low-frequency events

Goal 5 The ERO will balance the role of being a strong independent enforcement

authority with one of providing owners operators and users timely and

transparent feedback on compliance and effective incentives for improving

reliability

Goal 6 NERC and the regional entities will execute statutory functions in a collaborative

enterprise and thereby achieve efficiencies and effective process controls while

leveraging the expertise of staff and reliability stakeholder resources

Goal 7 The ERO will maintain an exceptional reputation as the trusted leader of the

reliability community and instill a high degree of confidence in the reliability of

the bulk power system

Based on NERCrsquos Strategic Plan and the top priority Issues for bulk power system

reliability the standing committeersquos leadership and NERC staff have assigned lead

committees for each reliability issue and formulated deliverables priorities and

milestones (see Table 1)

2 February 17 2011 Board of Trustees agenda item 7 Electric Reliability Organization Strategic Goals through 2015 httpwwwnerccomdocsdocsbotBOT-0211a-completepdf

Organization

Reliability Issues Coordinated Action Plan June 2011 5

Table 1 Proposed LeadSupport NERC Staff and Standing Committees

Top Priority Issues

NERC Lead

Standing Committee Lead NERC Support

Standing Committee Support

1 M

iso

pe

rati

on

s o

f re

lay

pro

tect

ion

and

co

ntr

ol s

yste

ms

Long

Rodriquez

Connor

Cummings

Bian

Standards Committee

Standard Drafting Teams (SDTs) o Protection System Maintenance o Coordination of Protection

Systems o Generator Verification o Protection System

Misoperations

Planning Committee

System Protection amp Control Subcommittee

Reliability Metrics Working Group

Kezele

Moon

Operating Committee

Compliance and Certification Committee

2 H

um

an e

rro

rs b

y

fie

ld p

ers

on

ne

l

Galloway

Kezele

Operating Committee

Personnel Subcommittee

Long Rodriquez

Connor

Moon

Standards Committee

Reliability Coordination SDT

Operations Communications Protocols SDT

Planning Committee

Compliance and Certification Committee

3 A

mb

igu

ou

s o

r

inco

mp

lete

vo

ice

com

mu

nic

atio

n Galloway

Kezele

Operating Committee

Long Rodriquez

Connor

Moon

Standards Committee

Reliability Coordination SDT

Operations Communications Protocols SDT

Planning Committee

Compliance and Certification Committee

4 R

igh

t-o

f-w

ay

mai

nte

nan

ce Kezele

Carter Operating Committee Connor

Moon

Long Rodriquez

Planning Committee

Compliance and Certification Committee

Standards Committee

Vegetation Management SDT

5 C

han

gin

g

reso

urc

e m

ix

Connor Moura Moura

Moura

Planning Committee

Reliability Assessment Subcommittee

Integration of Variable Generation Task Force

Smart Grid Task Force

Kezele

Moon

Connor Moura

Bian Moura

Operating Committee

Compliance and Certification Committee

Planning Committee

Demand Response Data Task Force

TADSGADS

Smart Grid Task Force

Organization

Reliability Issues Coordinated Action Plan June 2011 6

Top Priority Issues

NERC Lead

Standing Committee Lead NERC Support

Standing Committee Support

6 I

nte

grat

ion

of

ne

w

tech

no

logi

es

Connor Moura Moura

Planning Committee

Smart Grid Task Force

Reliability Assessment Subcommittee

Mix

Moon

Kezele

Critical Infrastructure Protection Committee

Compliance and Certification Committee

Operating Committee

7 P

rep

are

dn

ess

fo

r h

igh

imp

act

low

fre

qu

en

cy e

ven

ts

Connor Bian

Moura

Kezele Kezele

Mix

Roxey

Planning Committee

Spare Equipment Database Task Force

Geomagnetic Disturbance Task Force

Operating Committee

Severe Impact Resilience Task Force

Critical Infrastructure Protection Committee

Cyber Attack Task Force

Moon Compliance and Certification Committee

8 N

on

-tra

dit

ion

al

thre

ats

via

cyb

er-

secu

rity

vuln

era

bili

tie

s

Mix Critical Infrastructure Protection Committee

Connor Moura

Kezele

Moon

Planning Committee

Smart Grid Task Force

Operating Committee

Compliance and Certification Committee

Action Plan

Reliability Issues Coordinated Action Plan

June 2011

7

AAccttiioonn PPllaann

The following Action Plan (Table 2) provides Proposed Enhancements Abstract of activity priorities key deliverables and projected milestones

Table 2 Reliability Issues Action Plan

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

1

Mis

op

erat

ion

s o

f re

lay

pro

tect

ion

an

d c

on

tro

l sys

tem

s

Standards Committee

NERC Reliability Standards

Prepare and achieve approval Reliability Standards that minimize relay control system misoperations

High 1 PRC-005 Protection System

Maintenance 2 PRC-004 Protection System Misoperation

Identification and Correction (Rapid Development Pilot)

3 PRC-024 Generator Performance During Frequency and Voltage Excursions

4 PRC-019 Coordination of Generator Voltage Regulator Controls with Unit Capabilities and Protection

5 PRC-001 Protection System Coordination

1 BOT eta Q3 2011 2 BOT eta Q2 2012 3 BOT eta Q2 2012

4 BOT eta Q4 2012

5 BOT eta Q1 2013

Planning Committee System Protection amp Control Subcommittee

Reliability Metrics Working Group

Provide tools for improvement and measure trends

Enhancing the available tools to planners and operators and measuring trends will support industry efforts to improve

High

1 Guidance for relay maintenance and adequacy of protection engineering

2 Metrics that measure relaycontrol system misoperation

1 SPCS deliver Guide Q2 2012

2 RMWG develops metrics Q4 2011 TADSWG collects data as needed

Low 3 Address ways to enhance operator trainingrelay knowledge

3 SPCS in collaboration with the OCrsquos Personnel Subcommittee deliver tutorial for OC review Q4 2013

2

Hu

man

er

rors

by

fiel

d

per

son

nel

Operating Committee Personnel Subcommittee

Developing root causes lessons learned and guidance on processes can shape industry improvement opportunities

Enhancing industry knowledge of failure modes can improve reliability Standard development on operator training can help ensure successful implementation of recommendations

High 1 Develop guidance for root cause aspects

ndash including planningmanagement decisions

2 Develop refined cause codes to capture root cause

3 Develop processes that lead to quicker sharing of lessons learned

4 Develop guidance on tools development (man‐machine interfacedesign)

1 EAWG develop root cause guidebook by Q4 2012

2 EAWG to develop cause codes by Q4 2013

3 EAWG to streamline lessons learned process by Q4 2011

4 RCWG to create tools development guidebook Q4 2014

Action Plan

Reliability Issues Coordinated Action Plan June 2011 8

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

Medium 5 Develop process guidance for task design

(process resolutions plan the work and work the plan)

6 Support Personnel Training Standard

5 Personnel Subcommittee to prioritize and develop task design guidance Q3 2012

6 Personnel Subcommittee to develop SAR by Q4 2012

3

Am

big

uo

us

or

inco

mp

lete

vo

ice

com

mu

nic

atio

n

Standards Committee NERC Reliability Standards

Prepare and approve Reliability Standards that address communications

High 1 COM-002-3 ndash Communications and

Coordination Standard 2 COM-003-1 ndash Operating Personnel

Communications Protocols Standard

1 BOT eta Q1 2012

2 BOT eta Q4 2012

Operating Committee

Measurably improved communications in system operations

Provide guidance clarifying for operators the role of communications in improvement of reliability Should be a subset of 2 (good practices training deliverables etc)

Medium 1 Use other industries for guidance 2 Provide guidance on the benefits of using

of standard operating language or good practices separate from three-part communications Clarify for operators when communications are mission critical and when prescriptive forms impede reliability

3 Provide clear interpretations of the relevant reliability standards so that there is certainty for directives and associated communication actions

1 RCWG investigates and documents other industryrsquos experience and use of communications Report Q4 2012

2 RCWG develops guidelines on benefits from standard communication approaches Detail the use of communications to improve while not reducing reliability Q3 2013

3 Operating Committee works with NERCrsquos Compliance Operations on Compliance Application Notices (CAN) to eliminate ambiguous terms used in operations Q2 2012

4

Rig

ht-

of-

way

m

ain

ten

ance

Operating Committee (Primary Technical Committee ndash not determined)

Measurably improved right-of-way maintenance

Ensure that ROW maintenance practices result incompliance with FAC-003-2 requirements thereby maintaining reliability

High 1 Document actions undertaken that

address the facility ratings Alert results Leverage the North American Transmission Forum work for planning calculationsratings

2 Provide guidance for operational coordination among operating units TOPs RCs and BAs for different situations

1 Subgroup formed in collaboration with NERC and the Regional Entities along with the North American Transmission forum to document the result of the FAC-003-2 plans to develop industry guidance and action Q4 2011

2 Subgroup should develop guidelines for coordination among TOPs RCs and BAs Q4 2012

Action Plan

Reliability Issues Coordinated Action Plan June 2011 9

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

Standards Committee NERC Reliability Standards

Prepare and achieve approval of Reliability Standard for Transmission Vegetation Management

Low 1 FAC-003-2 ndash Transmission Vegetation

Management 1 BOT eta Q3 2011

5

Ch

angi

ng

reso

urc

e m

ix

Planning Committee

Reliability Assessment Subcommittee

Integration of Variable Generation Task Force

Smart Grid Task Force

Ready industry for the changing resource mix and technology integration by providing guidance and input into NERCrsquos Reliability Standards

Unprecedented change in resource mix being realized through retirement of aging units capital fuel costs along with environmental regulations This change along with technological advances in communications and control can change the well understood character of the bulk power system requiring changes in the planning approaches to ensure operational reliability

Medium 1 IVGTF ndash addressing frequency voltage

response resource flexibility contingency reserves

2 SGTF ndash addressing reliability impacts 3 RIS-RAS - addressing scenarios resource

mix planning probabilistic assessments 4 Scenarios that address resource mix

implications such as natural gas interdependence

5 Evaluate benefit of probabilistic metrics and provide guidance to plannersoperators

6 Develop targetsmetricsrefinements for planningoperation

7 Provide guidance on tools for operators 8 Develop potential standards proposals

or guidanceadvisories that enhance reliability

9 Provide recommendations for expanded planning assessments to address resource mix changes

1 through 13 See Planning Committeersquos Strategic Plan

3

and Action Plan4

3 through 6 Resource Issues and Reliability Assessment Subcommittees

Annual Summer Reliability Assessment

Annual Winter Reliability Assessment

Annual Long-Term Reliability Assessment o Scenarios o Emerging Issues o Probabilistic

3 httpwwwnerccomdocspcAgendaItem_5a_PC_2011-2016_Strategic_Plan_v5_LINKpdf

4 httpwwwnerccomdocspcAgendaItem_5ai_PC_Strategic_Plan_Next20Steps2020Future20Work20Plan_v5_LINKpdf

Action Plan

Reliability Issues Coordinated Action Plan June 2011 10

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

6

Inte

grat

ion

of

new

te

chn

olo

gies

Planning Committee

Smart Grid Task Force

Reliability Assessment Subcommittee

10 Smart Grid impacts from distribution

systems (Address cyber aspects in 8 Non-Traditional Threats via Cyber-Security Vulnerabilities)

11 IVGTF dealing with distribution (renewables EV and conventional) resource integration

12 DRDTF addressing high levels of demand response integration

13 TIS and SPCS will provide guidance for modeling and controls systems managementcoordination

Assessment

7

Pre

par

edn

ess

for

hig

h

imp

act

low

fre

qu

ency

ev

ents

Planning Committee

Spare Equipment Database Task Force

Geomagnetic Disturbance Task Force

Operating Committee

Severe Impact Resilience Task Force

Critical Infrastructure Protection Committee

Cyber Attack Task Force

Address the risks from selected high impact low frequency events which can have unacceptable consequences on bulk power system reliability

The bulk power system has significant amounts of built-in resiliency However it has been planned and operated with the known risks to successfully manage system performance With changing threats from cyber physical and new facts about GMD industry will adjust their planning and operational activities to address these evolving risks

High 1 The Electricity Subsector Coordinating

Council has developed a BOT approved Critical Infrastructure Strategic Roadmap

5 in Q4 2010

2 The technical Committees have developed a Critical Infrastructure Strategic Initiatives Coordinated Action Plan

6 BOT approved in Q4 2010

1-2 Covered in the technical committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan

5 httpwwwnerccomdocsesccESCC_Critical_Infrastructure_Strategic_Roadmappdf

6 httpwwwnerccomdocsciscapCritical_Infrastructure_Strategic_Initiatives_Coordinated_Action_Plan_BOT_Apprd_11-2010pdf

Action Plan

Reliability Issues Coordinated Action Plan June 2011 11

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

8

No

n-t

rad

itio

nal

th

reat

s vi

a cy

ber

-se

curi

ty

vuln

erab

iliti

es

Critical Infrastructure Protection Committee

A resilient system fortified by industry planning and operational practices

The continuously evolving threat from cyber-security vulnerabilities requires new processes and procedures both for system planning and operations Industry awareness and cooperation with governmental jurisdictions are key aspects for this improved situational awareness

High

1 Also part of the deliverables in item 7 Preparedness for High Impact Low Frequency events

2 Metric development to measure cyber strength being developed with the Planning Committeersquos Smart Grid Task Force (SGTF)

3 Ongoing industry Alerts as required 4 Guidelines required to advise industry on

the establishment of appropriate cyber-security programs in their organizations

1 Covered in the technical

committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan

2 See Planning Committeersquos Strategic Plan and Action Plan along with the work plan for the SGTF

7

3 See NERCrsquos Alert website8

4 A subgroup formed to develop guidelines reviewing other industryrsquos to take advantage of existing knowledge 2012 Q4

7 httpwwwnerccomfilesSGTF_Report_Final_posted_v11pdf

8 httpwwwnerccompagephpcid=5|63

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

12

AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess

Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the

following list and abstract description was developed

1 Misoperations of relay protection and control systems ndash Nearly all major system failures

excluding perhaps those caused by severe weather have misoperations of relays or

automatic controls as a factor contributing to the propagation of the failure Protection

systems are designed to operate reliably when needed under the presence of a fault on the

system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without

allowing the fault to transfer into adjoining facilities The greater the number of facilities

involved in an event the more severe the impact to the rest of the bulk power system with

cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout

being the extreme Relays can misoperate either operate when not needed or fail to

operate when needed for a number of reasons First the device could experience an

internal failure ndash but this is rare Most commonly relays fail to operate correctly due to

incorrect settings improper coordination (of timing and set points) with other devices

ineffective maintenance and testing or failure of communications channels or power

supplies Preventable errors can be introduced by field personnel and their supervisors or

more programmatically by the organization Adding to the risk is that system protection is

an extremely complex engineering field ndashthere are many practitioners but few masters

2 Human errors by field personnel ndash Field personnel play an important role in the

maintenance and operation of the bulk power system They often are switching equipment

in and out of service and aligning alternative configurations Risks can be introduced when

field personnel operate equipment in a manner that reduces the redundancy of the bulk

power system sometimes even creating single points of failure that would not exist

normally Taking outages of equipment to conduct maintenance is a routine and necessary

part of reliable bulk power system operation However any alterations to the configuration

of the network must be carefully planned in advance to minimize loss of redundancy and

avoid unintended single points of failure It is also important that such changes and risks be

communicated to system operators and reliability coordinators in advance so that they can

make adjustments in their operating plans and reliability assessments

3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system

operators and reliability coordinators are comfortable with informal communications with

field and power plant personnel and neighboring systems Experience from analyzing

various events indicates there is often a sense of awkwardness when personnel transition

from conversational discussion to issuing reliability instructions It is also human nature to

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

13

be uncomfortable in applying formal communication procedures after personnel have

developed informal styles over many years Confusion in making the transition from normal

conversation to formal communications can introduce misunderstandings and possibly even

incorrect actions or assumptions Further once the need to transition to more formal

structure is recognized the transition is often not complete or effective Results can include

unclear instructions confusion whether an instruction is a suggestion or a directive whether

specific action is required or a set of alternative actions are permissible and confusion over

what elements of the system are being addressed

4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation

management programs as a key recommendation for avoiding future cascading failures

More broadly any encroachments in the right-of-way that reduce clearances to the point of

lowering facility ratings or reducing the randomness of possible contacts can be a risk to

reliability Although these impacts may not always be readily apparent under extreme wind

and temperature conditions they may become more of a risk to bulk power system

reliability There are many challenges to effective right-of-way maintenance especially

maintaining proper clearances including interventions by private landowners local

municipalities and federal and state landowners

5 Changing resource mix ndash Energy and environmental policies along with energy markets are

driving proposals toward unprecedented changes in the resource mix of the bulk power

system Examples include integration of significant amounts of renewable (variable such as

wind and solar) natural gas storage and demand resources to provide energy and capacity

Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a

century of operational experience with the existing resource mix However integration of

these new resources results in operating characteristics significantly different from

conventional steam production facilities An array of reliability services must be provided

over a range of time horizons from seconds to minutes to hours and days and annually such

as load following contingency reserves frequency response reactive supply capacity and

voltage control and power system stability Continued reliable operation of the bulk power

system will require an industry dialog with policymakers and regulators Understanding the

impacts on reliability will depend on accurate modeling of new resources and development

of new methods and tools for the provision of essential reliability services

6 Integration of new technologies ndash Introduction of electric vehicles demand-side

management variable generation distributed resources and smart grid technologies

presents tremendous opportunities but also introduces changes to the operating

characteristics of the bulk power system Integration of these new technologies requires

changes in the way the bulk power system is planned and operated to maintain reliability

Further additional toolsmodels are required to support their integration to meet policy and

strategic goals Without these changes it will be challenging to maintain reliability with

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

14

large-scale deployments For example some smart grid devicessystems increase exposure

to cyber threats while variable generation requires additional ancillary services Integration

of these new technologies must be achieved in a manner that does not undermine existing

levels of stability resilience and security of the bulk power system

7 Preparedness for high impact low frequency events ndash Although there is a wide range of

threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for

possible events that could debilitate the bulk power system for extended periods such as

widespread coordinated physicalcyber attacks or geomagnetic storms The industry must

consider improving the design of the bulk power system to address these potential risks and

prepare coordinated North American response plans for use during catastrophic events and

be ready to deploy those plans to restore essential services in a timely manner

8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-

based programs policies and processes to prepare for react to and recover from cyber

security vulnerabilities is a high priority for the industry The bulk power system has not yet

experienced wide-spread cyber-attacks and a contributing factor has been the traditional

physical separation between the industrial control systemSCADA environment and the

business and administrative networks This situation however is rapidly changing

predominantly due to the efficiencies that can be achieved by leveraging shared networks

and resources so now even physically separated environments are susceptible For example

the bulk power system could be as vulnerable to digital threats as IT systems but with far

more critical implications as the recent Stuxnet virus has shown Disabling or turning

systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial

control system software can be changed and data can be stolen without intrusions even

being detected These injection vectors serve as a blueprint for future attackers who wish to

access controllers safety systems and protection devices to insert malicious code targeting

changes to set points and switches as well as alteration or suppression of measurements

Standing Committee Coordination Group Roster

Reliability Issues Coordinated Action Plan

June 2011

15

SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr

Position

Name Title

Company City StateProvince

Phone E-mail

CCC Chair W Clay Smith

2100 East Exchange Place Tucker Georgia 30084-5336

(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom

CCC Vice Chair Terry L Bilke

Director Standards and Compliance

Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202

317 249-5463 317 249-5358 Fax tbilkemidwestisoorg

CCC Vice Chair Brett Hallborg

Manager of Operations Training

BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2

(604) 455-1778 bretthallborgbchydroc

om

CIPC Chair Barry Lawson

Manager Power Delivery

National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203

(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo

p

CIPC Vice Chair Cyber

Charles F Abell PE Supervising Engineer

Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103

(314) 554-3817 (314) 206-0046 Fx cfabellamerencom

CIPC Vice Chair Physical Security

Robert D Canada Business Assurance Principal

Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308

(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom

OC Chair JS Holeman

Director System Operations

Duke Energy

(704) 382-0011 SamHolemanduke-energycom

Action Plan

Reliability Issues Coordinated Action Plan June 2011 16

Position

Name Title

Company City StateProvince

Phone E-mail

OC Vice Chair Tom Bowe

Executive Director of Compliance

PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403

610-666-4776 (610) 666-4287 Fx bowetpjmcom

PC Chair Tom Burgess

Director FERC Compliance

FirstEnergy Corp

330-384-5225 burgesstfirstenergycorpcom

PC Vice Chair Jeffrey L Mitchell

Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333

(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg

PCGC Chair Jacob Burger

Transmission System Control Coordinator

Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832

(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom

SC Chair Allen Mosher

Senior Director of Policy Analysis and Reliability

American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715

(202) 467-2944 (202) 467-2992 Fx amosherappanetorg

SC Vice Chair PS (Ben) Li

President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6

(647) 388-1498 (905) 887-2235 Fx benbenlica

REMG Representative

Edward A Schwerdt President and CEO

Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703

(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg

NERC Staff Roster

Reliability Issues Coordinated Action Plan

June 2011

17

NNEERRCC SSttaaffff RRoosstteerr

Position

Name Title

PhoneE-mail

NERC Staff Alvin J (AJ) Connor

Manager of Power System Analysis (609) 751-2579 ajconnornercnet

NERC Staff Tom Galloway

Senior Vice President and Chief Reliability Officer

(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet

NERC Staff Brian M Harrell

Manager of CIP Standards Training and Awareness

(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet

NERC Staff Larry J Kezele

Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet

NERC Staff Mark G Lauby

Vice President and Director of Reliability Assessment and Performance Analysis

(609) 452-8060 (609) 452-9550 Fax marklaubynercnet

NERC Staff Maureen E Long

Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet

NERC Staff Scott R Mix

CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet

NERC Staff Michael Moon

Director of Compliance Operations

(404) 446-2560 michaelmoonnercnet

NERC Staff Andrew Rodriquez Director of Standards Development

(404) 446-2560 andyrodriqueznercnet

NERC Staff Peter Knoetgen Director of Training and Accreditation

404-446-9688 peterknoetgennercnet

NERC Staff Herb Schrayshuen

Vice President and Director of Standards

((315) 439-1390 herbschrayshuennercnet

NERC Staff Mark Weatherford

Vice President and Chief Security Officer

(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet

Organization

Reliability Issues Coordinated Action Plan June 2011 4

OOrrggaanniizzaattiioonn

The Electric Reliability Organization (ERO) Strategic Goals through 2015 are summarized in the following key goals2

Goal 1 The ERO will have clear results-based reliability standards that provide for an

adequate level of bulk power system reliability

Goal 2 Bulk power system owners operators and users will demonstrate sustained

cultures of learning and reliability excellence built upon underlying foundations

of compliance and effective risk management and mitigation

Goal 3 The ERO will develop and maintain effective reliability performance measures

and will continue to develop high quality reliability assessments based on long

range and seasonal forecasts as well as emerging issues

Goal 4 Bulk power system owners operators and users will effectively manage risks

from cyber and physical attacks and other high-impact low-frequency events

Goal 5 The ERO will balance the role of being a strong independent enforcement

authority with one of providing owners operators and users timely and

transparent feedback on compliance and effective incentives for improving

reliability

Goal 6 NERC and the regional entities will execute statutory functions in a collaborative

enterprise and thereby achieve efficiencies and effective process controls while

leveraging the expertise of staff and reliability stakeholder resources

Goal 7 The ERO will maintain an exceptional reputation as the trusted leader of the

reliability community and instill a high degree of confidence in the reliability of

the bulk power system

Based on NERCrsquos Strategic Plan and the top priority Issues for bulk power system

reliability the standing committeersquos leadership and NERC staff have assigned lead

committees for each reliability issue and formulated deliverables priorities and

milestones (see Table 1)

2 February 17 2011 Board of Trustees agenda item 7 Electric Reliability Organization Strategic Goals through 2015 httpwwwnerccomdocsdocsbotBOT-0211a-completepdf

Organization

Reliability Issues Coordinated Action Plan June 2011 5

Table 1 Proposed LeadSupport NERC Staff and Standing Committees

Top Priority Issues

NERC Lead

Standing Committee Lead NERC Support

Standing Committee Support

1 M

iso

pe

rati

on

s o

f re

lay

pro

tect

ion

and

co

ntr

ol s

yste

ms

Long

Rodriquez

Connor

Cummings

Bian

Standards Committee

Standard Drafting Teams (SDTs) o Protection System Maintenance o Coordination of Protection

Systems o Generator Verification o Protection System

Misoperations

Planning Committee

System Protection amp Control Subcommittee

Reliability Metrics Working Group

Kezele

Moon

Operating Committee

Compliance and Certification Committee

2 H

um

an e

rro

rs b

y

fie

ld p

ers

on

ne

l

Galloway

Kezele

Operating Committee

Personnel Subcommittee

Long Rodriquez

Connor

Moon

Standards Committee

Reliability Coordination SDT

Operations Communications Protocols SDT

Planning Committee

Compliance and Certification Committee

3 A

mb

igu

ou

s o

r

inco

mp

lete

vo

ice

com

mu

nic

atio

n Galloway

Kezele

Operating Committee

Long Rodriquez

Connor

Moon

Standards Committee

Reliability Coordination SDT

Operations Communications Protocols SDT

Planning Committee

Compliance and Certification Committee

4 R

igh

t-o

f-w

ay

mai

nte

nan

ce Kezele

Carter Operating Committee Connor

Moon

Long Rodriquez

Planning Committee

Compliance and Certification Committee

Standards Committee

Vegetation Management SDT

5 C

han

gin

g

reso

urc

e m

ix

Connor Moura Moura

Moura

Planning Committee

Reliability Assessment Subcommittee

Integration of Variable Generation Task Force

Smart Grid Task Force

Kezele

Moon

Connor Moura

Bian Moura

Operating Committee

Compliance and Certification Committee

Planning Committee

Demand Response Data Task Force

TADSGADS

Smart Grid Task Force

Organization

Reliability Issues Coordinated Action Plan June 2011 6

Top Priority Issues

NERC Lead

Standing Committee Lead NERC Support

Standing Committee Support

6 I

nte

grat

ion

of

ne

w

tech

no

logi

es

Connor Moura Moura

Planning Committee

Smart Grid Task Force

Reliability Assessment Subcommittee

Mix

Moon

Kezele

Critical Infrastructure Protection Committee

Compliance and Certification Committee

Operating Committee

7 P

rep

are

dn

ess

fo

r h

igh

imp

act

low

fre

qu

en

cy e

ven

ts

Connor Bian

Moura

Kezele Kezele

Mix

Roxey

Planning Committee

Spare Equipment Database Task Force

Geomagnetic Disturbance Task Force

Operating Committee

Severe Impact Resilience Task Force

Critical Infrastructure Protection Committee

Cyber Attack Task Force

Moon Compliance and Certification Committee

8 N

on

-tra

dit

ion

al

thre

ats

via

cyb

er-

secu

rity

vuln

era

bili

tie

s

Mix Critical Infrastructure Protection Committee

Connor Moura

Kezele

Moon

Planning Committee

Smart Grid Task Force

Operating Committee

Compliance and Certification Committee

Action Plan

Reliability Issues Coordinated Action Plan

June 2011

7

AAccttiioonn PPllaann

The following Action Plan (Table 2) provides Proposed Enhancements Abstract of activity priorities key deliverables and projected milestones

Table 2 Reliability Issues Action Plan

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

1

Mis

op

erat

ion

s o

f re

lay

pro

tect

ion

an

d c

on

tro

l sys

tem

s

Standards Committee

NERC Reliability Standards

Prepare and achieve approval Reliability Standards that minimize relay control system misoperations

High 1 PRC-005 Protection System

Maintenance 2 PRC-004 Protection System Misoperation

Identification and Correction (Rapid Development Pilot)

3 PRC-024 Generator Performance During Frequency and Voltage Excursions

4 PRC-019 Coordination of Generator Voltage Regulator Controls with Unit Capabilities and Protection

5 PRC-001 Protection System Coordination

1 BOT eta Q3 2011 2 BOT eta Q2 2012 3 BOT eta Q2 2012

4 BOT eta Q4 2012

5 BOT eta Q1 2013

Planning Committee System Protection amp Control Subcommittee

Reliability Metrics Working Group

Provide tools for improvement and measure trends

Enhancing the available tools to planners and operators and measuring trends will support industry efforts to improve

High

1 Guidance for relay maintenance and adequacy of protection engineering

2 Metrics that measure relaycontrol system misoperation

1 SPCS deliver Guide Q2 2012

2 RMWG develops metrics Q4 2011 TADSWG collects data as needed

Low 3 Address ways to enhance operator trainingrelay knowledge

3 SPCS in collaboration with the OCrsquos Personnel Subcommittee deliver tutorial for OC review Q4 2013

2

Hu

man

er

rors

by

fiel

d

per

son

nel

Operating Committee Personnel Subcommittee

Developing root causes lessons learned and guidance on processes can shape industry improvement opportunities

Enhancing industry knowledge of failure modes can improve reliability Standard development on operator training can help ensure successful implementation of recommendations

High 1 Develop guidance for root cause aspects

ndash including planningmanagement decisions

2 Develop refined cause codes to capture root cause

3 Develop processes that lead to quicker sharing of lessons learned

4 Develop guidance on tools development (man‐machine interfacedesign)

1 EAWG develop root cause guidebook by Q4 2012

2 EAWG to develop cause codes by Q4 2013

3 EAWG to streamline lessons learned process by Q4 2011

4 RCWG to create tools development guidebook Q4 2014

Action Plan

Reliability Issues Coordinated Action Plan June 2011 8

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

Medium 5 Develop process guidance for task design

(process resolutions plan the work and work the plan)

6 Support Personnel Training Standard

5 Personnel Subcommittee to prioritize and develop task design guidance Q3 2012

6 Personnel Subcommittee to develop SAR by Q4 2012

3

Am

big

uo

us

or

inco

mp

lete

vo

ice

com

mu

nic

atio

n

Standards Committee NERC Reliability Standards

Prepare and approve Reliability Standards that address communications

High 1 COM-002-3 ndash Communications and

Coordination Standard 2 COM-003-1 ndash Operating Personnel

Communications Protocols Standard

1 BOT eta Q1 2012

2 BOT eta Q4 2012

Operating Committee

Measurably improved communications in system operations

Provide guidance clarifying for operators the role of communications in improvement of reliability Should be a subset of 2 (good practices training deliverables etc)

Medium 1 Use other industries for guidance 2 Provide guidance on the benefits of using

of standard operating language or good practices separate from three-part communications Clarify for operators when communications are mission critical and when prescriptive forms impede reliability

3 Provide clear interpretations of the relevant reliability standards so that there is certainty for directives and associated communication actions

1 RCWG investigates and documents other industryrsquos experience and use of communications Report Q4 2012

2 RCWG develops guidelines on benefits from standard communication approaches Detail the use of communications to improve while not reducing reliability Q3 2013

3 Operating Committee works with NERCrsquos Compliance Operations on Compliance Application Notices (CAN) to eliminate ambiguous terms used in operations Q2 2012

4

Rig

ht-

of-

way

m

ain

ten

ance

Operating Committee (Primary Technical Committee ndash not determined)

Measurably improved right-of-way maintenance

Ensure that ROW maintenance practices result incompliance with FAC-003-2 requirements thereby maintaining reliability

High 1 Document actions undertaken that

address the facility ratings Alert results Leverage the North American Transmission Forum work for planning calculationsratings

2 Provide guidance for operational coordination among operating units TOPs RCs and BAs for different situations

1 Subgroup formed in collaboration with NERC and the Regional Entities along with the North American Transmission forum to document the result of the FAC-003-2 plans to develop industry guidance and action Q4 2011

2 Subgroup should develop guidelines for coordination among TOPs RCs and BAs Q4 2012

Action Plan

Reliability Issues Coordinated Action Plan June 2011 9

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

Standards Committee NERC Reliability Standards

Prepare and achieve approval of Reliability Standard for Transmission Vegetation Management

Low 1 FAC-003-2 ndash Transmission Vegetation

Management 1 BOT eta Q3 2011

5

Ch

angi

ng

reso

urc

e m

ix

Planning Committee

Reliability Assessment Subcommittee

Integration of Variable Generation Task Force

Smart Grid Task Force

Ready industry for the changing resource mix and technology integration by providing guidance and input into NERCrsquos Reliability Standards

Unprecedented change in resource mix being realized through retirement of aging units capital fuel costs along with environmental regulations This change along with technological advances in communications and control can change the well understood character of the bulk power system requiring changes in the planning approaches to ensure operational reliability

Medium 1 IVGTF ndash addressing frequency voltage

response resource flexibility contingency reserves

2 SGTF ndash addressing reliability impacts 3 RIS-RAS - addressing scenarios resource

mix planning probabilistic assessments 4 Scenarios that address resource mix

implications such as natural gas interdependence

5 Evaluate benefit of probabilistic metrics and provide guidance to plannersoperators

6 Develop targetsmetricsrefinements for planningoperation

7 Provide guidance on tools for operators 8 Develop potential standards proposals

or guidanceadvisories that enhance reliability

9 Provide recommendations for expanded planning assessments to address resource mix changes

1 through 13 See Planning Committeersquos Strategic Plan

3

and Action Plan4

3 through 6 Resource Issues and Reliability Assessment Subcommittees

Annual Summer Reliability Assessment

Annual Winter Reliability Assessment

Annual Long-Term Reliability Assessment o Scenarios o Emerging Issues o Probabilistic

3 httpwwwnerccomdocspcAgendaItem_5a_PC_2011-2016_Strategic_Plan_v5_LINKpdf

4 httpwwwnerccomdocspcAgendaItem_5ai_PC_Strategic_Plan_Next20Steps2020Future20Work20Plan_v5_LINKpdf

Action Plan

Reliability Issues Coordinated Action Plan June 2011 10

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

6

Inte

grat

ion

of

new

te

chn

olo

gies

Planning Committee

Smart Grid Task Force

Reliability Assessment Subcommittee

10 Smart Grid impacts from distribution

systems (Address cyber aspects in 8 Non-Traditional Threats via Cyber-Security Vulnerabilities)

11 IVGTF dealing with distribution (renewables EV and conventional) resource integration

12 DRDTF addressing high levels of demand response integration

13 TIS and SPCS will provide guidance for modeling and controls systems managementcoordination

Assessment

7

Pre

par

edn

ess

for

hig

h

imp

act

low

fre

qu

ency

ev

ents

Planning Committee

Spare Equipment Database Task Force

Geomagnetic Disturbance Task Force

Operating Committee

Severe Impact Resilience Task Force

Critical Infrastructure Protection Committee

Cyber Attack Task Force

Address the risks from selected high impact low frequency events which can have unacceptable consequences on bulk power system reliability

The bulk power system has significant amounts of built-in resiliency However it has been planned and operated with the known risks to successfully manage system performance With changing threats from cyber physical and new facts about GMD industry will adjust their planning and operational activities to address these evolving risks

High 1 The Electricity Subsector Coordinating

Council has developed a BOT approved Critical Infrastructure Strategic Roadmap

5 in Q4 2010

2 The technical Committees have developed a Critical Infrastructure Strategic Initiatives Coordinated Action Plan

6 BOT approved in Q4 2010

1-2 Covered in the technical committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan

5 httpwwwnerccomdocsesccESCC_Critical_Infrastructure_Strategic_Roadmappdf

6 httpwwwnerccomdocsciscapCritical_Infrastructure_Strategic_Initiatives_Coordinated_Action_Plan_BOT_Apprd_11-2010pdf

Action Plan

Reliability Issues Coordinated Action Plan June 2011 11

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

8

No

n-t

rad

itio

nal

th

reat

s vi

a cy

ber

-se

curi

ty

vuln

erab

iliti

es

Critical Infrastructure Protection Committee

A resilient system fortified by industry planning and operational practices

The continuously evolving threat from cyber-security vulnerabilities requires new processes and procedures both for system planning and operations Industry awareness and cooperation with governmental jurisdictions are key aspects for this improved situational awareness

High

1 Also part of the deliverables in item 7 Preparedness for High Impact Low Frequency events

2 Metric development to measure cyber strength being developed with the Planning Committeersquos Smart Grid Task Force (SGTF)

3 Ongoing industry Alerts as required 4 Guidelines required to advise industry on

the establishment of appropriate cyber-security programs in their organizations

1 Covered in the technical

committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan

2 See Planning Committeersquos Strategic Plan and Action Plan along with the work plan for the SGTF

7

3 See NERCrsquos Alert website8

4 A subgroup formed to develop guidelines reviewing other industryrsquos to take advantage of existing knowledge 2012 Q4

7 httpwwwnerccomfilesSGTF_Report_Final_posted_v11pdf

8 httpwwwnerccompagephpcid=5|63

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

12

AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess

Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the

following list and abstract description was developed

1 Misoperations of relay protection and control systems ndash Nearly all major system failures

excluding perhaps those caused by severe weather have misoperations of relays or

automatic controls as a factor contributing to the propagation of the failure Protection

systems are designed to operate reliably when needed under the presence of a fault on the

system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without

allowing the fault to transfer into adjoining facilities The greater the number of facilities

involved in an event the more severe the impact to the rest of the bulk power system with

cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout

being the extreme Relays can misoperate either operate when not needed or fail to

operate when needed for a number of reasons First the device could experience an

internal failure ndash but this is rare Most commonly relays fail to operate correctly due to

incorrect settings improper coordination (of timing and set points) with other devices

ineffective maintenance and testing or failure of communications channels or power

supplies Preventable errors can be introduced by field personnel and their supervisors or

more programmatically by the organization Adding to the risk is that system protection is

an extremely complex engineering field ndashthere are many practitioners but few masters

2 Human errors by field personnel ndash Field personnel play an important role in the

maintenance and operation of the bulk power system They often are switching equipment

in and out of service and aligning alternative configurations Risks can be introduced when

field personnel operate equipment in a manner that reduces the redundancy of the bulk

power system sometimes even creating single points of failure that would not exist

normally Taking outages of equipment to conduct maintenance is a routine and necessary

part of reliable bulk power system operation However any alterations to the configuration

of the network must be carefully planned in advance to minimize loss of redundancy and

avoid unintended single points of failure It is also important that such changes and risks be

communicated to system operators and reliability coordinators in advance so that they can

make adjustments in their operating plans and reliability assessments

3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system

operators and reliability coordinators are comfortable with informal communications with

field and power plant personnel and neighboring systems Experience from analyzing

various events indicates there is often a sense of awkwardness when personnel transition

from conversational discussion to issuing reliability instructions It is also human nature to

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

13

be uncomfortable in applying formal communication procedures after personnel have

developed informal styles over many years Confusion in making the transition from normal

conversation to formal communications can introduce misunderstandings and possibly even

incorrect actions or assumptions Further once the need to transition to more formal

structure is recognized the transition is often not complete or effective Results can include

unclear instructions confusion whether an instruction is a suggestion or a directive whether

specific action is required or a set of alternative actions are permissible and confusion over

what elements of the system are being addressed

4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation

management programs as a key recommendation for avoiding future cascading failures

More broadly any encroachments in the right-of-way that reduce clearances to the point of

lowering facility ratings or reducing the randomness of possible contacts can be a risk to

reliability Although these impacts may not always be readily apparent under extreme wind

and temperature conditions they may become more of a risk to bulk power system

reliability There are many challenges to effective right-of-way maintenance especially

maintaining proper clearances including interventions by private landowners local

municipalities and federal and state landowners

5 Changing resource mix ndash Energy and environmental policies along with energy markets are

driving proposals toward unprecedented changes in the resource mix of the bulk power

system Examples include integration of significant amounts of renewable (variable such as

wind and solar) natural gas storage and demand resources to provide energy and capacity

Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a

century of operational experience with the existing resource mix However integration of

these new resources results in operating characteristics significantly different from

conventional steam production facilities An array of reliability services must be provided

over a range of time horizons from seconds to minutes to hours and days and annually such

as load following contingency reserves frequency response reactive supply capacity and

voltage control and power system stability Continued reliable operation of the bulk power

system will require an industry dialog with policymakers and regulators Understanding the

impacts on reliability will depend on accurate modeling of new resources and development

of new methods and tools for the provision of essential reliability services

6 Integration of new technologies ndash Introduction of electric vehicles demand-side

management variable generation distributed resources and smart grid technologies

presents tremendous opportunities but also introduces changes to the operating

characteristics of the bulk power system Integration of these new technologies requires

changes in the way the bulk power system is planned and operated to maintain reliability

Further additional toolsmodels are required to support their integration to meet policy and

strategic goals Without these changes it will be challenging to maintain reliability with

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

14

large-scale deployments For example some smart grid devicessystems increase exposure

to cyber threats while variable generation requires additional ancillary services Integration

of these new technologies must be achieved in a manner that does not undermine existing

levels of stability resilience and security of the bulk power system

7 Preparedness for high impact low frequency events ndash Although there is a wide range of

threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for

possible events that could debilitate the bulk power system for extended periods such as

widespread coordinated physicalcyber attacks or geomagnetic storms The industry must

consider improving the design of the bulk power system to address these potential risks and

prepare coordinated North American response plans for use during catastrophic events and

be ready to deploy those plans to restore essential services in a timely manner

8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-

based programs policies and processes to prepare for react to and recover from cyber

security vulnerabilities is a high priority for the industry The bulk power system has not yet

experienced wide-spread cyber-attacks and a contributing factor has been the traditional

physical separation between the industrial control systemSCADA environment and the

business and administrative networks This situation however is rapidly changing

predominantly due to the efficiencies that can be achieved by leveraging shared networks

and resources so now even physically separated environments are susceptible For example

the bulk power system could be as vulnerable to digital threats as IT systems but with far

more critical implications as the recent Stuxnet virus has shown Disabling or turning

systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial

control system software can be changed and data can be stolen without intrusions even

being detected These injection vectors serve as a blueprint for future attackers who wish to

access controllers safety systems and protection devices to insert malicious code targeting

changes to set points and switches as well as alteration or suppression of measurements

Standing Committee Coordination Group Roster

Reliability Issues Coordinated Action Plan

June 2011

15

SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr

Position

Name Title

Company City StateProvince

Phone E-mail

CCC Chair W Clay Smith

2100 East Exchange Place Tucker Georgia 30084-5336

(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom

CCC Vice Chair Terry L Bilke

Director Standards and Compliance

Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202

317 249-5463 317 249-5358 Fax tbilkemidwestisoorg

CCC Vice Chair Brett Hallborg

Manager of Operations Training

BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2

(604) 455-1778 bretthallborgbchydroc

om

CIPC Chair Barry Lawson

Manager Power Delivery

National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203

(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo

p

CIPC Vice Chair Cyber

Charles F Abell PE Supervising Engineer

Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103

(314) 554-3817 (314) 206-0046 Fx cfabellamerencom

CIPC Vice Chair Physical Security

Robert D Canada Business Assurance Principal

Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308

(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom

OC Chair JS Holeman

Director System Operations

Duke Energy

(704) 382-0011 SamHolemanduke-energycom

Action Plan

Reliability Issues Coordinated Action Plan June 2011 16

Position

Name Title

Company City StateProvince

Phone E-mail

OC Vice Chair Tom Bowe

Executive Director of Compliance

PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403

610-666-4776 (610) 666-4287 Fx bowetpjmcom

PC Chair Tom Burgess

Director FERC Compliance

FirstEnergy Corp

330-384-5225 burgesstfirstenergycorpcom

PC Vice Chair Jeffrey L Mitchell

Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333

(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg

PCGC Chair Jacob Burger

Transmission System Control Coordinator

Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832

(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom

SC Chair Allen Mosher

Senior Director of Policy Analysis and Reliability

American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715

(202) 467-2944 (202) 467-2992 Fx amosherappanetorg

SC Vice Chair PS (Ben) Li

President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6

(647) 388-1498 (905) 887-2235 Fx benbenlica

REMG Representative

Edward A Schwerdt President and CEO

Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703

(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg

NERC Staff Roster

Reliability Issues Coordinated Action Plan

June 2011

17

NNEERRCC SSttaaffff RRoosstteerr

Position

Name Title

PhoneE-mail

NERC Staff Alvin J (AJ) Connor

Manager of Power System Analysis (609) 751-2579 ajconnornercnet

NERC Staff Tom Galloway

Senior Vice President and Chief Reliability Officer

(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet

NERC Staff Brian M Harrell

Manager of CIP Standards Training and Awareness

(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet

NERC Staff Larry J Kezele

Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet

NERC Staff Mark G Lauby

Vice President and Director of Reliability Assessment and Performance Analysis

(609) 452-8060 (609) 452-9550 Fax marklaubynercnet

NERC Staff Maureen E Long

Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet

NERC Staff Scott R Mix

CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet

NERC Staff Michael Moon

Director of Compliance Operations

(404) 446-2560 michaelmoonnercnet

NERC Staff Andrew Rodriquez Director of Standards Development

(404) 446-2560 andyrodriqueznercnet

NERC Staff Peter Knoetgen Director of Training and Accreditation

404-446-9688 peterknoetgennercnet

NERC Staff Herb Schrayshuen

Vice President and Director of Standards

((315) 439-1390 herbschrayshuennercnet

NERC Staff Mark Weatherford

Vice President and Chief Security Officer

(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet

Organization

Reliability Issues Coordinated Action Plan June 2011 5

Table 1 Proposed LeadSupport NERC Staff and Standing Committees

Top Priority Issues

NERC Lead

Standing Committee Lead NERC Support

Standing Committee Support

1 M

iso

pe

rati

on

s o

f re

lay

pro

tect

ion

and

co

ntr

ol s

yste

ms

Long

Rodriquez

Connor

Cummings

Bian

Standards Committee

Standard Drafting Teams (SDTs) o Protection System Maintenance o Coordination of Protection

Systems o Generator Verification o Protection System

Misoperations

Planning Committee

System Protection amp Control Subcommittee

Reliability Metrics Working Group

Kezele

Moon

Operating Committee

Compliance and Certification Committee

2 H

um

an e

rro

rs b

y

fie

ld p

ers

on

ne

l

Galloway

Kezele

Operating Committee

Personnel Subcommittee

Long Rodriquez

Connor

Moon

Standards Committee

Reliability Coordination SDT

Operations Communications Protocols SDT

Planning Committee

Compliance and Certification Committee

3 A

mb

igu

ou

s o

r

inco

mp

lete

vo

ice

com

mu

nic

atio

n Galloway

Kezele

Operating Committee

Long Rodriquez

Connor

Moon

Standards Committee

Reliability Coordination SDT

Operations Communications Protocols SDT

Planning Committee

Compliance and Certification Committee

4 R

igh

t-o

f-w

ay

mai

nte

nan

ce Kezele

Carter Operating Committee Connor

Moon

Long Rodriquez

Planning Committee

Compliance and Certification Committee

Standards Committee

Vegetation Management SDT

5 C

han

gin

g

reso

urc

e m

ix

Connor Moura Moura

Moura

Planning Committee

Reliability Assessment Subcommittee

Integration of Variable Generation Task Force

Smart Grid Task Force

Kezele

Moon

Connor Moura

Bian Moura

Operating Committee

Compliance and Certification Committee

Planning Committee

Demand Response Data Task Force

TADSGADS

Smart Grid Task Force

Organization

Reliability Issues Coordinated Action Plan June 2011 6

Top Priority Issues

NERC Lead

Standing Committee Lead NERC Support

Standing Committee Support

6 I

nte

grat

ion

of

ne

w

tech

no

logi

es

Connor Moura Moura

Planning Committee

Smart Grid Task Force

Reliability Assessment Subcommittee

Mix

Moon

Kezele

Critical Infrastructure Protection Committee

Compliance and Certification Committee

Operating Committee

7 P

rep

are

dn

ess

fo

r h

igh

imp

act

low

fre

qu

en

cy e

ven

ts

Connor Bian

Moura

Kezele Kezele

Mix

Roxey

Planning Committee

Spare Equipment Database Task Force

Geomagnetic Disturbance Task Force

Operating Committee

Severe Impact Resilience Task Force

Critical Infrastructure Protection Committee

Cyber Attack Task Force

Moon Compliance and Certification Committee

8 N

on

-tra

dit

ion

al

thre

ats

via

cyb

er-

secu

rity

vuln

era

bili

tie

s

Mix Critical Infrastructure Protection Committee

Connor Moura

Kezele

Moon

Planning Committee

Smart Grid Task Force

Operating Committee

Compliance and Certification Committee

Action Plan

Reliability Issues Coordinated Action Plan

June 2011

7

AAccttiioonn PPllaann

The following Action Plan (Table 2) provides Proposed Enhancements Abstract of activity priorities key deliverables and projected milestones

Table 2 Reliability Issues Action Plan

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

1

Mis

op

erat

ion

s o

f re

lay

pro

tect

ion

an

d c

on

tro

l sys

tem

s

Standards Committee

NERC Reliability Standards

Prepare and achieve approval Reliability Standards that minimize relay control system misoperations

High 1 PRC-005 Protection System

Maintenance 2 PRC-004 Protection System Misoperation

Identification and Correction (Rapid Development Pilot)

3 PRC-024 Generator Performance During Frequency and Voltage Excursions

4 PRC-019 Coordination of Generator Voltage Regulator Controls with Unit Capabilities and Protection

5 PRC-001 Protection System Coordination

1 BOT eta Q3 2011 2 BOT eta Q2 2012 3 BOT eta Q2 2012

4 BOT eta Q4 2012

5 BOT eta Q1 2013

Planning Committee System Protection amp Control Subcommittee

Reliability Metrics Working Group

Provide tools for improvement and measure trends

Enhancing the available tools to planners and operators and measuring trends will support industry efforts to improve

High

1 Guidance for relay maintenance and adequacy of protection engineering

2 Metrics that measure relaycontrol system misoperation

1 SPCS deliver Guide Q2 2012

2 RMWG develops metrics Q4 2011 TADSWG collects data as needed

Low 3 Address ways to enhance operator trainingrelay knowledge

3 SPCS in collaboration with the OCrsquos Personnel Subcommittee deliver tutorial for OC review Q4 2013

2

Hu

man

er

rors

by

fiel

d

per

son

nel

Operating Committee Personnel Subcommittee

Developing root causes lessons learned and guidance on processes can shape industry improvement opportunities

Enhancing industry knowledge of failure modes can improve reliability Standard development on operator training can help ensure successful implementation of recommendations

High 1 Develop guidance for root cause aspects

ndash including planningmanagement decisions

2 Develop refined cause codes to capture root cause

3 Develop processes that lead to quicker sharing of lessons learned

4 Develop guidance on tools development (man‐machine interfacedesign)

1 EAWG develop root cause guidebook by Q4 2012

2 EAWG to develop cause codes by Q4 2013

3 EAWG to streamline lessons learned process by Q4 2011

4 RCWG to create tools development guidebook Q4 2014

Action Plan

Reliability Issues Coordinated Action Plan June 2011 8

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

Medium 5 Develop process guidance for task design

(process resolutions plan the work and work the plan)

6 Support Personnel Training Standard

5 Personnel Subcommittee to prioritize and develop task design guidance Q3 2012

6 Personnel Subcommittee to develop SAR by Q4 2012

3

Am

big

uo

us

or

inco

mp

lete

vo

ice

com

mu

nic

atio

n

Standards Committee NERC Reliability Standards

Prepare and approve Reliability Standards that address communications

High 1 COM-002-3 ndash Communications and

Coordination Standard 2 COM-003-1 ndash Operating Personnel

Communications Protocols Standard

1 BOT eta Q1 2012

2 BOT eta Q4 2012

Operating Committee

Measurably improved communications in system operations

Provide guidance clarifying for operators the role of communications in improvement of reliability Should be a subset of 2 (good practices training deliverables etc)

Medium 1 Use other industries for guidance 2 Provide guidance on the benefits of using

of standard operating language or good practices separate from three-part communications Clarify for operators when communications are mission critical and when prescriptive forms impede reliability

3 Provide clear interpretations of the relevant reliability standards so that there is certainty for directives and associated communication actions

1 RCWG investigates and documents other industryrsquos experience and use of communications Report Q4 2012

2 RCWG develops guidelines on benefits from standard communication approaches Detail the use of communications to improve while not reducing reliability Q3 2013

3 Operating Committee works with NERCrsquos Compliance Operations on Compliance Application Notices (CAN) to eliminate ambiguous terms used in operations Q2 2012

4

Rig

ht-

of-

way

m

ain

ten

ance

Operating Committee (Primary Technical Committee ndash not determined)

Measurably improved right-of-way maintenance

Ensure that ROW maintenance practices result incompliance with FAC-003-2 requirements thereby maintaining reliability

High 1 Document actions undertaken that

address the facility ratings Alert results Leverage the North American Transmission Forum work for planning calculationsratings

2 Provide guidance for operational coordination among operating units TOPs RCs and BAs for different situations

1 Subgroup formed in collaboration with NERC and the Regional Entities along with the North American Transmission forum to document the result of the FAC-003-2 plans to develop industry guidance and action Q4 2011

2 Subgroup should develop guidelines for coordination among TOPs RCs and BAs Q4 2012

Action Plan

Reliability Issues Coordinated Action Plan June 2011 9

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

Standards Committee NERC Reliability Standards

Prepare and achieve approval of Reliability Standard for Transmission Vegetation Management

Low 1 FAC-003-2 ndash Transmission Vegetation

Management 1 BOT eta Q3 2011

5

Ch

angi

ng

reso

urc

e m

ix

Planning Committee

Reliability Assessment Subcommittee

Integration of Variable Generation Task Force

Smart Grid Task Force

Ready industry for the changing resource mix and technology integration by providing guidance and input into NERCrsquos Reliability Standards

Unprecedented change in resource mix being realized through retirement of aging units capital fuel costs along with environmental regulations This change along with technological advances in communications and control can change the well understood character of the bulk power system requiring changes in the planning approaches to ensure operational reliability

Medium 1 IVGTF ndash addressing frequency voltage

response resource flexibility contingency reserves

2 SGTF ndash addressing reliability impacts 3 RIS-RAS - addressing scenarios resource

mix planning probabilistic assessments 4 Scenarios that address resource mix

implications such as natural gas interdependence

5 Evaluate benefit of probabilistic metrics and provide guidance to plannersoperators

6 Develop targetsmetricsrefinements for planningoperation

7 Provide guidance on tools for operators 8 Develop potential standards proposals

or guidanceadvisories that enhance reliability

9 Provide recommendations for expanded planning assessments to address resource mix changes

1 through 13 See Planning Committeersquos Strategic Plan

3

and Action Plan4

3 through 6 Resource Issues and Reliability Assessment Subcommittees

Annual Summer Reliability Assessment

Annual Winter Reliability Assessment

Annual Long-Term Reliability Assessment o Scenarios o Emerging Issues o Probabilistic

3 httpwwwnerccomdocspcAgendaItem_5a_PC_2011-2016_Strategic_Plan_v5_LINKpdf

4 httpwwwnerccomdocspcAgendaItem_5ai_PC_Strategic_Plan_Next20Steps2020Future20Work20Plan_v5_LINKpdf

Action Plan

Reliability Issues Coordinated Action Plan June 2011 10

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

6

Inte

grat

ion

of

new

te

chn

olo

gies

Planning Committee

Smart Grid Task Force

Reliability Assessment Subcommittee

10 Smart Grid impacts from distribution

systems (Address cyber aspects in 8 Non-Traditional Threats via Cyber-Security Vulnerabilities)

11 IVGTF dealing with distribution (renewables EV and conventional) resource integration

12 DRDTF addressing high levels of demand response integration

13 TIS and SPCS will provide guidance for modeling and controls systems managementcoordination

Assessment

7

Pre

par

edn

ess

for

hig

h

imp

act

low

fre

qu

ency

ev

ents

Planning Committee

Spare Equipment Database Task Force

Geomagnetic Disturbance Task Force

Operating Committee

Severe Impact Resilience Task Force

Critical Infrastructure Protection Committee

Cyber Attack Task Force

Address the risks from selected high impact low frequency events which can have unacceptable consequences on bulk power system reliability

The bulk power system has significant amounts of built-in resiliency However it has been planned and operated with the known risks to successfully manage system performance With changing threats from cyber physical and new facts about GMD industry will adjust their planning and operational activities to address these evolving risks

High 1 The Electricity Subsector Coordinating

Council has developed a BOT approved Critical Infrastructure Strategic Roadmap

5 in Q4 2010

2 The technical Committees have developed a Critical Infrastructure Strategic Initiatives Coordinated Action Plan

6 BOT approved in Q4 2010

1-2 Covered in the technical committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan

5 httpwwwnerccomdocsesccESCC_Critical_Infrastructure_Strategic_Roadmappdf

6 httpwwwnerccomdocsciscapCritical_Infrastructure_Strategic_Initiatives_Coordinated_Action_Plan_BOT_Apprd_11-2010pdf

Action Plan

Reliability Issues Coordinated Action Plan June 2011 11

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

8

No

n-t

rad

itio

nal

th

reat

s vi

a cy

ber

-se

curi

ty

vuln

erab

iliti

es

Critical Infrastructure Protection Committee

A resilient system fortified by industry planning and operational practices

The continuously evolving threat from cyber-security vulnerabilities requires new processes and procedures both for system planning and operations Industry awareness and cooperation with governmental jurisdictions are key aspects for this improved situational awareness

High

1 Also part of the deliverables in item 7 Preparedness for High Impact Low Frequency events

2 Metric development to measure cyber strength being developed with the Planning Committeersquos Smart Grid Task Force (SGTF)

3 Ongoing industry Alerts as required 4 Guidelines required to advise industry on

the establishment of appropriate cyber-security programs in their organizations

1 Covered in the technical

committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan

2 See Planning Committeersquos Strategic Plan and Action Plan along with the work plan for the SGTF

7

3 See NERCrsquos Alert website8

4 A subgroup formed to develop guidelines reviewing other industryrsquos to take advantage of existing knowledge 2012 Q4

7 httpwwwnerccomfilesSGTF_Report_Final_posted_v11pdf

8 httpwwwnerccompagephpcid=5|63

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

12

AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess

Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the

following list and abstract description was developed

1 Misoperations of relay protection and control systems ndash Nearly all major system failures

excluding perhaps those caused by severe weather have misoperations of relays or

automatic controls as a factor contributing to the propagation of the failure Protection

systems are designed to operate reliably when needed under the presence of a fault on the

system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without

allowing the fault to transfer into adjoining facilities The greater the number of facilities

involved in an event the more severe the impact to the rest of the bulk power system with

cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout

being the extreme Relays can misoperate either operate when not needed or fail to

operate when needed for a number of reasons First the device could experience an

internal failure ndash but this is rare Most commonly relays fail to operate correctly due to

incorrect settings improper coordination (of timing and set points) with other devices

ineffective maintenance and testing or failure of communications channels or power

supplies Preventable errors can be introduced by field personnel and their supervisors or

more programmatically by the organization Adding to the risk is that system protection is

an extremely complex engineering field ndashthere are many practitioners but few masters

2 Human errors by field personnel ndash Field personnel play an important role in the

maintenance and operation of the bulk power system They often are switching equipment

in and out of service and aligning alternative configurations Risks can be introduced when

field personnel operate equipment in a manner that reduces the redundancy of the bulk

power system sometimes even creating single points of failure that would not exist

normally Taking outages of equipment to conduct maintenance is a routine and necessary

part of reliable bulk power system operation However any alterations to the configuration

of the network must be carefully planned in advance to minimize loss of redundancy and

avoid unintended single points of failure It is also important that such changes and risks be

communicated to system operators and reliability coordinators in advance so that they can

make adjustments in their operating plans and reliability assessments

3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system

operators and reliability coordinators are comfortable with informal communications with

field and power plant personnel and neighboring systems Experience from analyzing

various events indicates there is often a sense of awkwardness when personnel transition

from conversational discussion to issuing reliability instructions It is also human nature to

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

13

be uncomfortable in applying formal communication procedures after personnel have

developed informal styles over many years Confusion in making the transition from normal

conversation to formal communications can introduce misunderstandings and possibly even

incorrect actions or assumptions Further once the need to transition to more formal

structure is recognized the transition is often not complete or effective Results can include

unclear instructions confusion whether an instruction is a suggestion or a directive whether

specific action is required or a set of alternative actions are permissible and confusion over

what elements of the system are being addressed

4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation

management programs as a key recommendation for avoiding future cascading failures

More broadly any encroachments in the right-of-way that reduce clearances to the point of

lowering facility ratings or reducing the randomness of possible contacts can be a risk to

reliability Although these impacts may not always be readily apparent under extreme wind

and temperature conditions they may become more of a risk to bulk power system

reliability There are many challenges to effective right-of-way maintenance especially

maintaining proper clearances including interventions by private landowners local

municipalities and federal and state landowners

5 Changing resource mix ndash Energy and environmental policies along with energy markets are

driving proposals toward unprecedented changes in the resource mix of the bulk power

system Examples include integration of significant amounts of renewable (variable such as

wind and solar) natural gas storage and demand resources to provide energy and capacity

Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a

century of operational experience with the existing resource mix However integration of

these new resources results in operating characteristics significantly different from

conventional steam production facilities An array of reliability services must be provided

over a range of time horizons from seconds to minutes to hours and days and annually such

as load following contingency reserves frequency response reactive supply capacity and

voltage control and power system stability Continued reliable operation of the bulk power

system will require an industry dialog with policymakers and regulators Understanding the

impacts on reliability will depend on accurate modeling of new resources and development

of new methods and tools for the provision of essential reliability services

6 Integration of new technologies ndash Introduction of electric vehicles demand-side

management variable generation distributed resources and smart grid technologies

presents tremendous opportunities but also introduces changes to the operating

characteristics of the bulk power system Integration of these new technologies requires

changes in the way the bulk power system is planned and operated to maintain reliability

Further additional toolsmodels are required to support their integration to meet policy and

strategic goals Without these changes it will be challenging to maintain reliability with

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

14

large-scale deployments For example some smart grid devicessystems increase exposure

to cyber threats while variable generation requires additional ancillary services Integration

of these new technologies must be achieved in a manner that does not undermine existing

levels of stability resilience and security of the bulk power system

7 Preparedness for high impact low frequency events ndash Although there is a wide range of

threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for

possible events that could debilitate the bulk power system for extended periods such as

widespread coordinated physicalcyber attacks or geomagnetic storms The industry must

consider improving the design of the bulk power system to address these potential risks and

prepare coordinated North American response plans for use during catastrophic events and

be ready to deploy those plans to restore essential services in a timely manner

8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-

based programs policies and processes to prepare for react to and recover from cyber

security vulnerabilities is a high priority for the industry The bulk power system has not yet

experienced wide-spread cyber-attacks and a contributing factor has been the traditional

physical separation between the industrial control systemSCADA environment and the

business and administrative networks This situation however is rapidly changing

predominantly due to the efficiencies that can be achieved by leveraging shared networks

and resources so now even physically separated environments are susceptible For example

the bulk power system could be as vulnerable to digital threats as IT systems but with far

more critical implications as the recent Stuxnet virus has shown Disabling or turning

systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial

control system software can be changed and data can be stolen without intrusions even

being detected These injection vectors serve as a blueprint for future attackers who wish to

access controllers safety systems and protection devices to insert malicious code targeting

changes to set points and switches as well as alteration or suppression of measurements

Standing Committee Coordination Group Roster

Reliability Issues Coordinated Action Plan

June 2011

15

SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr

Position

Name Title

Company City StateProvince

Phone E-mail

CCC Chair W Clay Smith

2100 East Exchange Place Tucker Georgia 30084-5336

(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom

CCC Vice Chair Terry L Bilke

Director Standards and Compliance

Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202

317 249-5463 317 249-5358 Fax tbilkemidwestisoorg

CCC Vice Chair Brett Hallborg

Manager of Operations Training

BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2

(604) 455-1778 bretthallborgbchydroc

om

CIPC Chair Barry Lawson

Manager Power Delivery

National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203

(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo

p

CIPC Vice Chair Cyber

Charles F Abell PE Supervising Engineer

Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103

(314) 554-3817 (314) 206-0046 Fx cfabellamerencom

CIPC Vice Chair Physical Security

Robert D Canada Business Assurance Principal

Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308

(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom

OC Chair JS Holeman

Director System Operations

Duke Energy

(704) 382-0011 SamHolemanduke-energycom

Action Plan

Reliability Issues Coordinated Action Plan June 2011 16

Position

Name Title

Company City StateProvince

Phone E-mail

OC Vice Chair Tom Bowe

Executive Director of Compliance

PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403

610-666-4776 (610) 666-4287 Fx bowetpjmcom

PC Chair Tom Burgess

Director FERC Compliance

FirstEnergy Corp

330-384-5225 burgesstfirstenergycorpcom

PC Vice Chair Jeffrey L Mitchell

Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333

(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg

PCGC Chair Jacob Burger

Transmission System Control Coordinator

Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832

(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom

SC Chair Allen Mosher

Senior Director of Policy Analysis and Reliability

American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715

(202) 467-2944 (202) 467-2992 Fx amosherappanetorg

SC Vice Chair PS (Ben) Li

President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6

(647) 388-1498 (905) 887-2235 Fx benbenlica

REMG Representative

Edward A Schwerdt President and CEO

Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703

(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg

NERC Staff Roster

Reliability Issues Coordinated Action Plan

June 2011

17

NNEERRCC SSttaaffff RRoosstteerr

Position

Name Title

PhoneE-mail

NERC Staff Alvin J (AJ) Connor

Manager of Power System Analysis (609) 751-2579 ajconnornercnet

NERC Staff Tom Galloway

Senior Vice President and Chief Reliability Officer

(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet

NERC Staff Brian M Harrell

Manager of CIP Standards Training and Awareness

(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet

NERC Staff Larry J Kezele

Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet

NERC Staff Mark G Lauby

Vice President and Director of Reliability Assessment and Performance Analysis

(609) 452-8060 (609) 452-9550 Fax marklaubynercnet

NERC Staff Maureen E Long

Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet

NERC Staff Scott R Mix

CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet

NERC Staff Michael Moon

Director of Compliance Operations

(404) 446-2560 michaelmoonnercnet

NERC Staff Andrew Rodriquez Director of Standards Development

(404) 446-2560 andyrodriqueznercnet

NERC Staff Peter Knoetgen Director of Training and Accreditation

404-446-9688 peterknoetgennercnet

NERC Staff Herb Schrayshuen

Vice President and Director of Standards

((315) 439-1390 herbschrayshuennercnet

NERC Staff Mark Weatherford

Vice President and Chief Security Officer

(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet

Organization

Reliability Issues Coordinated Action Plan June 2011 6

Top Priority Issues

NERC Lead

Standing Committee Lead NERC Support

Standing Committee Support

6 I

nte

grat

ion

of

ne

w

tech

no

logi

es

Connor Moura Moura

Planning Committee

Smart Grid Task Force

Reliability Assessment Subcommittee

Mix

Moon

Kezele

Critical Infrastructure Protection Committee

Compliance and Certification Committee

Operating Committee

7 P

rep

are

dn

ess

fo

r h

igh

imp

act

low

fre

qu

en

cy e

ven

ts

Connor Bian

Moura

Kezele Kezele

Mix

Roxey

Planning Committee

Spare Equipment Database Task Force

Geomagnetic Disturbance Task Force

Operating Committee

Severe Impact Resilience Task Force

Critical Infrastructure Protection Committee

Cyber Attack Task Force

Moon Compliance and Certification Committee

8 N

on

-tra

dit

ion

al

thre

ats

via

cyb

er-

secu

rity

vuln

era

bili

tie

s

Mix Critical Infrastructure Protection Committee

Connor Moura

Kezele

Moon

Planning Committee

Smart Grid Task Force

Operating Committee

Compliance and Certification Committee

Action Plan

Reliability Issues Coordinated Action Plan

June 2011

7

AAccttiioonn PPllaann

The following Action Plan (Table 2) provides Proposed Enhancements Abstract of activity priorities key deliverables and projected milestones

Table 2 Reliability Issues Action Plan

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

1

Mis

op

erat

ion

s o

f re

lay

pro

tect

ion

an

d c

on

tro

l sys

tem

s

Standards Committee

NERC Reliability Standards

Prepare and achieve approval Reliability Standards that minimize relay control system misoperations

High 1 PRC-005 Protection System

Maintenance 2 PRC-004 Protection System Misoperation

Identification and Correction (Rapid Development Pilot)

3 PRC-024 Generator Performance During Frequency and Voltage Excursions

4 PRC-019 Coordination of Generator Voltage Regulator Controls with Unit Capabilities and Protection

5 PRC-001 Protection System Coordination

1 BOT eta Q3 2011 2 BOT eta Q2 2012 3 BOT eta Q2 2012

4 BOT eta Q4 2012

5 BOT eta Q1 2013

Planning Committee System Protection amp Control Subcommittee

Reliability Metrics Working Group

Provide tools for improvement and measure trends

Enhancing the available tools to planners and operators and measuring trends will support industry efforts to improve

High

1 Guidance for relay maintenance and adequacy of protection engineering

2 Metrics that measure relaycontrol system misoperation

1 SPCS deliver Guide Q2 2012

2 RMWG develops metrics Q4 2011 TADSWG collects data as needed

Low 3 Address ways to enhance operator trainingrelay knowledge

3 SPCS in collaboration with the OCrsquos Personnel Subcommittee deliver tutorial for OC review Q4 2013

2

Hu

man

er

rors

by

fiel

d

per

son

nel

Operating Committee Personnel Subcommittee

Developing root causes lessons learned and guidance on processes can shape industry improvement opportunities

Enhancing industry knowledge of failure modes can improve reliability Standard development on operator training can help ensure successful implementation of recommendations

High 1 Develop guidance for root cause aspects

ndash including planningmanagement decisions

2 Develop refined cause codes to capture root cause

3 Develop processes that lead to quicker sharing of lessons learned

4 Develop guidance on tools development (man‐machine interfacedesign)

1 EAWG develop root cause guidebook by Q4 2012

2 EAWG to develop cause codes by Q4 2013

3 EAWG to streamline lessons learned process by Q4 2011

4 RCWG to create tools development guidebook Q4 2014

Action Plan

Reliability Issues Coordinated Action Plan June 2011 8

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

Medium 5 Develop process guidance for task design

(process resolutions plan the work and work the plan)

6 Support Personnel Training Standard

5 Personnel Subcommittee to prioritize and develop task design guidance Q3 2012

6 Personnel Subcommittee to develop SAR by Q4 2012

3

Am

big

uo

us

or

inco

mp

lete

vo

ice

com

mu

nic

atio

n

Standards Committee NERC Reliability Standards

Prepare and approve Reliability Standards that address communications

High 1 COM-002-3 ndash Communications and

Coordination Standard 2 COM-003-1 ndash Operating Personnel

Communications Protocols Standard

1 BOT eta Q1 2012

2 BOT eta Q4 2012

Operating Committee

Measurably improved communications in system operations

Provide guidance clarifying for operators the role of communications in improvement of reliability Should be a subset of 2 (good practices training deliverables etc)

Medium 1 Use other industries for guidance 2 Provide guidance on the benefits of using

of standard operating language or good practices separate from three-part communications Clarify for operators when communications are mission critical and when prescriptive forms impede reliability

3 Provide clear interpretations of the relevant reliability standards so that there is certainty for directives and associated communication actions

1 RCWG investigates and documents other industryrsquos experience and use of communications Report Q4 2012

2 RCWG develops guidelines on benefits from standard communication approaches Detail the use of communications to improve while not reducing reliability Q3 2013

3 Operating Committee works with NERCrsquos Compliance Operations on Compliance Application Notices (CAN) to eliminate ambiguous terms used in operations Q2 2012

4

Rig

ht-

of-

way

m

ain

ten

ance

Operating Committee (Primary Technical Committee ndash not determined)

Measurably improved right-of-way maintenance

Ensure that ROW maintenance practices result incompliance with FAC-003-2 requirements thereby maintaining reliability

High 1 Document actions undertaken that

address the facility ratings Alert results Leverage the North American Transmission Forum work for planning calculationsratings

2 Provide guidance for operational coordination among operating units TOPs RCs and BAs for different situations

1 Subgroup formed in collaboration with NERC and the Regional Entities along with the North American Transmission forum to document the result of the FAC-003-2 plans to develop industry guidance and action Q4 2011

2 Subgroup should develop guidelines for coordination among TOPs RCs and BAs Q4 2012

Action Plan

Reliability Issues Coordinated Action Plan June 2011 9

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

Standards Committee NERC Reliability Standards

Prepare and achieve approval of Reliability Standard for Transmission Vegetation Management

Low 1 FAC-003-2 ndash Transmission Vegetation

Management 1 BOT eta Q3 2011

5

Ch

angi

ng

reso

urc

e m

ix

Planning Committee

Reliability Assessment Subcommittee

Integration of Variable Generation Task Force

Smart Grid Task Force

Ready industry for the changing resource mix and technology integration by providing guidance and input into NERCrsquos Reliability Standards

Unprecedented change in resource mix being realized through retirement of aging units capital fuel costs along with environmental regulations This change along with technological advances in communications and control can change the well understood character of the bulk power system requiring changes in the planning approaches to ensure operational reliability

Medium 1 IVGTF ndash addressing frequency voltage

response resource flexibility contingency reserves

2 SGTF ndash addressing reliability impacts 3 RIS-RAS - addressing scenarios resource

mix planning probabilistic assessments 4 Scenarios that address resource mix

implications such as natural gas interdependence

5 Evaluate benefit of probabilistic metrics and provide guidance to plannersoperators

6 Develop targetsmetricsrefinements for planningoperation

7 Provide guidance on tools for operators 8 Develop potential standards proposals

or guidanceadvisories that enhance reliability

9 Provide recommendations for expanded planning assessments to address resource mix changes

1 through 13 See Planning Committeersquos Strategic Plan

3

and Action Plan4

3 through 6 Resource Issues and Reliability Assessment Subcommittees

Annual Summer Reliability Assessment

Annual Winter Reliability Assessment

Annual Long-Term Reliability Assessment o Scenarios o Emerging Issues o Probabilistic

3 httpwwwnerccomdocspcAgendaItem_5a_PC_2011-2016_Strategic_Plan_v5_LINKpdf

4 httpwwwnerccomdocspcAgendaItem_5ai_PC_Strategic_Plan_Next20Steps2020Future20Work20Plan_v5_LINKpdf

Action Plan

Reliability Issues Coordinated Action Plan June 2011 10

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

6

Inte

grat

ion

of

new

te

chn

olo

gies

Planning Committee

Smart Grid Task Force

Reliability Assessment Subcommittee

10 Smart Grid impacts from distribution

systems (Address cyber aspects in 8 Non-Traditional Threats via Cyber-Security Vulnerabilities)

11 IVGTF dealing with distribution (renewables EV and conventional) resource integration

12 DRDTF addressing high levels of demand response integration

13 TIS and SPCS will provide guidance for modeling and controls systems managementcoordination

Assessment

7

Pre

par

edn

ess

for

hig

h

imp

act

low

fre

qu

ency

ev

ents

Planning Committee

Spare Equipment Database Task Force

Geomagnetic Disturbance Task Force

Operating Committee

Severe Impact Resilience Task Force

Critical Infrastructure Protection Committee

Cyber Attack Task Force

Address the risks from selected high impact low frequency events which can have unacceptable consequences on bulk power system reliability

The bulk power system has significant amounts of built-in resiliency However it has been planned and operated with the known risks to successfully manage system performance With changing threats from cyber physical and new facts about GMD industry will adjust their planning and operational activities to address these evolving risks

High 1 The Electricity Subsector Coordinating

Council has developed a BOT approved Critical Infrastructure Strategic Roadmap

5 in Q4 2010

2 The technical Committees have developed a Critical Infrastructure Strategic Initiatives Coordinated Action Plan

6 BOT approved in Q4 2010

1-2 Covered in the technical committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan

5 httpwwwnerccomdocsesccESCC_Critical_Infrastructure_Strategic_Roadmappdf

6 httpwwwnerccomdocsciscapCritical_Infrastructure_Strategic_Initiatives_Coordinated_Action_Plan_BOT_Apprd_11-2010pdf

Action Plan

Reliability Issues Coordinated Action Plan June 2011 11

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

8

No

n-t

rad

itio

nal

th

reat

s vi

a cy

ber

-se

curi

ty

vuln

erab

iliti

es

Critical Infrastructure Protection Committee

A resilient system fortified by industry planning and operational practices

The continuously evolving threat from cyber-security vulnerabilities requires new processes and procedures both for system planning and operations Industry awareness and cooperation with governmental jurisdictions are key aspects for this improved situational awareness

High

1 Also part of the deliverables in item 7 Preparedness for High Impact Low Frequency events

2 Metric development to measure cyber strength being developed with the Planning Committeersquos Smart Grid Task Force (SGTF)

3 Ongoing industry Alerts as required 4 Guidelines required to advise industry on

the establishment of appropriate cyber-security programs in their organizations

1 Covered in the technical

committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan

2 See Planning Committeersquos Strategic Plan and Action Plan along with the work plan for the SGTF

7

3 See NERCrsquos Alert website8

4 A subgroup formed to develop guidelines reviewing other industryrsquos to take advantage of existing knowledge 2012 Q4

7 httpwwwnerccomfilesSGTF_Report_Final_posted_v11pdf

8 httpwwwnerccompagephpcid=5|63

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

12

AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess

Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the

following list and abstract description was developed

1 Misoperations of relay protection and control systems ndash Nearly all major system failures

excluding perhaps those caused by severe weather have misoperations of relays or

automatic controls as a factor contributing to the propagation of the failure Protection

systems are designed to operate reliably when needed under the presence of a fault on the

system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without

allowing the fault to transfer into adjoining facilities The greater the number of facilities

involved in an event the more severe the impact to the rest of the bulk power system with

cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout

being the extreme Relays can misoperate either operate when not needed or fail to

operate when needed for a number of reasons First the device could experience an

internal failure ndash but this is rare Most commonly relays fail to operate correctly due to

incorrect settings improper coordination (of timing and set points) with other devices

ineffective maintenance and testing or failure of communications channels or power

supplies Preventable errors can be introduced by field personnel and their supervisors or

more programmatically by the organization Adding to the risk is that system protection is

an extremely complex engineering field ndashthere are many practitioners but few masters

2 Human errors by field personnel ndash Field personnel play an important role in the

maintenance and operation of the bulk power system They often are switching equipment

in and out of service and aligning alternative configurations Risks can be introduced when

field personnel operate equipment in a manner that reduces the redundancy of the bulk

power system sometimes even creating single points of failure that would not exist

normally Taking outages of equipment to conduct maintenance is a routine and necessary

part of reliable bulk power system operation However any alterations to the configuration

of the network must be carefully planned in advance to minimize loss of redundancy and

avoid unintended single points of failure It is also important that such changes and risks be

communicated to system operators and reliability coordinators in advance so that they can

make adjustments in their operating plans and reliability assessments

3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system

operators and reliability coordinators are comfortable with informal communications with

field and power plant personnel and neighboring systems Experience from analyzing

various events indicates there is often a sense of awkwardness when personnel transition

from conversational discussion to issuing reliability instructions It is also human nature to

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

13

be uncomfortable in applying formal communication procedures after personnel have

developed informal styles over many years Confusion in making the transition from normal

conversation to formal communications can introduce misunderstandings and possibly even

incorrect actions or assumptions Further once the need to transition to more formal

structure is recognized the transition is often not complete or effective Results can include

unclear instructions confusion whether an instruction is a suggestion or a directive whether

specific action is required or a set of alternative actions are permissible and confusion over

what elements of the system are being addressed

4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation

management programs as a key recommendation for avoiding future cascading failures

More broadly any encroachments in the right-of-way that reduce clearances to the point of

lowering facility ratings or reducing the randomness of possible contacts can be a risk to

reliability Although these impacts may not always be readily apparent under extreme wind

and temperature conditions they may become more of a risk to bulk power system

reliability There are many challenges to effective right-of-way maintenance especially

maintaining proper clearances including interventions by private landowners local

municipalities and federal and state landowners

5 Changing resource mix ndash Energy and environmental policies along with energy markets are

driving proposals toward unprecedented changes in the resource mix of the bulk power

system Examples include integration of significant amounts of renewable (variable such as

wind and solar) natural gas storage and demand resources to provide energy and capacity

Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a

century of operational experience with the existing resource mix However integration of

these new resources results in operating characteristics significantly different from

conventional steam production facilities An array of reliability services must be provided

over a range of time horizons from seconds to minutes to hours and days and annually such

as load following contingency reserves frequency response reactive supply capacity and

voltage control and power system stability Continued reliable operation of the bulk power

system will require an industry dialog with policymakers and regulators Understanding the

impacts on reliability will depend on accurate modeling of new resources and development

of new methods and tools for the provision of essential reliability services

6 Integration of new technologies ndash Introduction of electric vehicles demand-side

management variable generation distributed resources and smart grid technologies

presents tremendous opportunities but also introduces changes to the operating

characteristics of the bulk power system Integration of these new technologies requires

changes in the way the bulk power system is planned and operated to maintain reliability

Further additional toolsmodels are required to support their integration to meet policy and

strategic goals Without these changes it will be challenging to maintain reliability with

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

14

large-scale deployments For example some smart grid devicessystems increase exposure

to cyber threats while variable generation requires additional ancillary services Integration

of these new technologies must be achieved in a manner that does not undermine existing

levels of stability resilience and security of the bulk power system

7 Preparedness for high impact low frequency events ndash Although there is a wide range of

threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for

possible events that could debilitate the bulk power system for extended periods such as

widespread coordinated physicalcyber attacks or geomagnetic storms The industry must

consider improving the design of the bulk power system to address these potential risks and

prepare coordinated North American response plans for use during catastrophic events and

be ready to deploy those plans to restore essential services in a timely manner

8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-

based programs policies and processes to prepare for react to and recover from cyber

security vulnerabilities is a high priority for the industry The bulk power system has not yet

experienced wide-spread cyber-attacks and a contributing factor has been the traditional

physical separation between the industrial control systemSCADA environment and the

business and administrative networks This situation however is rapidly changing

predominantly due to the efficiencies that can be achieved by leveraging shared networks

and resources so now even physically separated environments are susceptible For example

the bulk power system could be as vulnerable to digital threats as IT systems but with far

more critical implications as the recent Stuxnet virus has shown Disabling or turning

systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial

control system software can be changed and data can be stolen without intrusions even

being detected These injection vectors serve as a blueprint for future attackers who wish to

access controllers safety systems and protection devices to insert malicious code targeting

changes to set points and switches as well as alteration or suppression of measurements

Standing Committee Coordination Group Roster

Reliability Issues Coordinated Action Plan

June 2011

15

SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr

Position

Name Title

Company City StateProvince

Phone E-mail

CCC Chair W Clay Smith

2100 East Exchange Place Tucker Georgia 30084-5336

(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom

CCC Vice Chair Terry L Bilke

Director Standards and Compliance

Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202

317 249-5463 317 249-5358 Fax tbilkemidwestisoorg

CCC Vice Chair Brett Hallborg

Manager of Operations Training

BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2

(604) 455-1778 bretthallborgbchydroc

om

CIPC Chair Barry Lawson

Manager Power Delivery

National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203

(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo

p

CIPC Vice Chair Cyber

Charles F Abell PE Supervising Engineer

Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103

(314) 554-3817 (314) 206-0046 Fx cfabellamerencom

CIPC Vice Chair Physical Security

Robert D Canada Business Assurance Principal

Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308

(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom

OC Chair JS Holeman

Director System Operations

Duke Energy

(704) 382-0011 SamHolemanduke-energycom

Action Plan

Reliability Issues Coordinated Action Plan June 2011 16

Position

Name Title

Company City StateProvince

Phone E-mail

OC Vice Chair Tom Bowe

Executive Director of Compliance

PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403

610-666-4776 (610) 666-4287 Fx bowetpjmcom

PC Chair Tom Burgess

Director FERC Compliance

FirstEnergy Corp

330-384-5225 burgesstfirstenergycorpcom

PC Vice Chair Jeffrey L Mitchell

Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333

(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg

PCGC Chair Jacob Burger

Transmission System Control Coordinator

Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832

(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom

SC Chair Allen Mosher

Senior Director of Policy Analysis and Reliability

American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715

(202) 467-2944 (202) 467-2992 Fx amosherappanetorg

SC Vice Chair PS (Ben) Li

President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6

(647) 388-1498 (905) 887-2235 Fx benbenlica

REMG Representative

Edward A Schwerdt President and CEO

Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703

(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg

NERC Staff Roster

Reliability Issues Coordinated Action Plan

June 2011

17

NNEERRCC SSttaaffff RRoosstteerr

Position

Name Title

PhoneE-mail

NERC Staff Alvin J (AJ) Connor

Manager of Power System Analysis (609) 751-2579 ajconnornercnet

NERC Staff Tom Galloway

Senior Vice President and Chief Reliability Officer

(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet

NERC Staff Brian M Harrell

Manager of CIP Standards Training and Awareness

(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet

NERC Staff Larry J Kezele

Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet

NERC Staff Mark G Lauby

Vice President and Director of Reliability Assessment and Performance Analysis

(609) 452-8060 (609) 452-9550 Fax marklaubynercnet

NERC Staff Maureen E Long

Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet

NERC Staff Scott R Mix

CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet

NERC Staff Michael Moon

Director of Compliance Operations

(404) 446-2560 michaelmoonnercnet

NERC Staff Andrew Rodriquez Director of Standards Development

(404) 446-2560 andyrodriqueznercnet

NERC Staff Peter Knoetgen Director of Training and Accreditation

404-446-9688 peterknoetgennercnet

NERC Staff Herb Schrayshuen

Vice President and Director of Standards

((315) 439-1390 herbschrayshuennercnet

NERC Staff Mark Weatherford

Vice President and Chief Security Officer

(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet

Action Plan

Reliability Issues Coordinated Action Plan

June 2011

7

AAccttiioonn PPllaann

The following Action Plan (Table 2) provides Proposed Enhancements Abstract of activity priorities key deliverables and projected milestones

Table 2 Reliability Issues Action Plan

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

1

Mis

op

erat

ion

s o

f re

lay

pro

tect

ion

an

d c

on

tro

l sys

tem

s

Standards Committee

NERC Reliability Standards

Prepare and achieve approval Reliability Standards that minimize relay control system misoperations

High 1 PRC-005 Protection System

Maintenance 2 PRC-004 Protection System Misoperation

Identification and Correction (Rapid Development Pilot)

3 PRC-024 Generator Performance During Frequency and Voltage Excursions

4 PRC-019 Coordination of Generator Voltage Regulator Controls with Unit Capabilities and Protection

5 PRC-001 Protection System Coordination

1 BOT eta Q3 2011 2 BOT eta Q2 2012 3 BOT eta Q2 2012

4 BOT eta Q4 2012

5 BOT eta Q1 2013

Planning Committee System Protection amp Control Subcommittee

Reliability Metrics Working Group

Provide tools for improvement and measure trends

Enhancing the available tools to planners and operators and measuring trends will support industry efforts to improve

High

1 Guidance for relay maintenance and adequacy of protection engineering

2 Metrics that measure relaycontrol system misoperation

1 SPCS deliver Guide Q2 2012

2 RMWG develops metrics Q4 2011 TADSWG collects data as needed

Low 3 Address ways to enhance operator trainingrelay knowledge

3 SPCS in collaboration with the OCrsquos Personnel Subcommittee deliver tutorial for OC review Q4 2013

2

Hu

man

er

rors

by

fiel

d

per

son

nel

Operating Committee Personnel Subcommittee

Developing root causes lessons learned and guidance on processes can shape industry improvement opportunities

Enhancing industry knowledge of failure modes can improve reliability Standard development on operator training can help ensure successful implementation of recommendations

High 1 Develop guidance for root cause aspects

ndash including planningmanagement decisions

2 Develop refined cause codes to capture root cause

3 Develop processes that lead to quicker sharing of lessons learned

4 Develop guidance on tools development (man‐machine interfacedesign)

1 EAWG develop root cause guidebook by Q4 2012

2 EAWG to develop cause codes by Q4 2013

3 EAWG to streamline lessons learned process by Q4 2011

4 RCWG to create tools development guidebook Q4 2014

Action Plan

Reliability Issues Coordinated Action Plan June 2011 8

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

Medium 5 Develop process guidance for task design

(process resolutions plan the work and work the plan)

6 Support Personnel Training Standard

5 Personnel Subcommittee to prioritize and develop task design guidance Q3 2012

6 Personnel Subcommittee to develop SAR by Q4 2012

3

Am

big

uo

us

or

inco

mp

lete

vo

ice

com

mu

nic

atio

n

Standards Committee NERC Reliability Standards

Prepare and approve Reliability Standards that address communications

High 1 COM-002-3 ndash Communications and

Coordination Standard 2 COM-003-1 ndash Operating Personnel

Communications Protocols Standard

1 BOT eta Q1 2012

2 BOT eta Q4 2012

Operating Committee

Measurably improved communications in system operations

Provide guidance clarifying for operators the role of communications in improvement of reliability Should be a subset of 2 (good practices training deliverables etc)

Medium 1 Use other industries for guidance 2 Provide guidance on the benefits of using

of standard operating language or good practices separate from three-part communications Clarify for operators when communications are mission critical and when prescriptive forms impede reliability

3 Provide clear interpretations of the relevant reliability standards so that there is certainty for directives and associated communication actions

1 RCWG investigates and documents other industryrsquos experience and use of communications Report Q4 2012

2 RCWG develops guidelines on benefits from standard communication approaches Detail the use of communications to improve while not reducing reliability Q3 2013

3 Operating Committee works with NERCrsquos Compliance Operations on Compliance Application Notices (CAN) to eliminate ambiguous terms used in operations Q2 2012

4

Rig

ht-

of-

way

m

ain

ten

ance

Operating Committee (Primary Technical Committee ndash not determined)

Measurably improved right-of-way maintenance

Ensure that ROW maintenance practices result incompliance with FAC-003-2 requirements thereby maintaining reliability

High 1 Document actions undertaken that

address the facility ratings Alert results Leverage the North American Transmission Forum work for planning calculationsratings

2 Provide guidance for operational coordination among operating units TOPs RCs and BAs for different situations

1 Subgroup formed in collaboration with NERC and the Regional Entities along with the North American Transmission forum to document the result of the FAC-003-2 plans to develop industry guidance and action Q4 2011

2 Subgroup should develop guidelines for coordination among TOPs RCs and BAs Q4 2012

Action Plan

Reliability Issues Coordinated Action Plan June 2011 9

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

Standards Committee NERC Reliability Standards

Prepare and achieve approval of Reliability Standard for Transmission Vegetation Management

Low 1 FAC-003-2 ndash Transmission Vegetation

Management 1 BOT eta Q3 2011

5

Ch

angi

ng

reso

urc

e m

ix

Planning Committee

Reliability Assessment Subcommittee

Integration of Variable Generation Task Force

Smart Grid Task Force

Ready industry for the changing resource mix and technology integration by providing guidance and input into NERCrsquos Reliability Standards

Unprecedented change in resource mix being realized through retirement of aging units capital fuel costs along with environmental regulations This change along with technological advances in communications and control can change the well understood character of the bulk power system requiring changes in the planning approaches to ensure operational reliability

Medium 1 IVGTF ndash addressing frequency voltage

response resource flexibility contingency reserves

2 SGTF ndash addressing reliability impacts 3 RIS-RAS - addressing scenarios resource

mix planning probabilistic assessments 4 Scenarios that address resource mix

implications such as natural gas interdependence

5 Evaluate benefit of probabilistic metrics and provide guidance to plannersoperators

6 Develop targetsmetricsrefinements for planningoperation

7 Provide guidance on tools for operators 8 Develop potential standards proposals

or guidanceadvisories that enhance reliability

9 Provide recommendations for expanded planning assessments to address resource mix changes

1 through 13 See Planning Committeersquos Strategic Plan

3

and Action Plan4

3 through 6 Resource Issues and Reliability Assessment Subcommittees

Annual Summer Reliability Assessment

Annual Winter Reliability Assessment

Annual Long-Term Reliability Assessment o Scenarios o Emerging Issues o Probabilistic

3 httpwwwnerccomdocspcAgendaItem_5a_PC_2011-2016_Strategic_Plan_v5_LINKpdf

4 httpwwwnerccomdocspcAgendaItem_5ai_PC_Strategic_Plan_Next20Steps2020Future20Work20Plan_v5_LINKpdf

Action Plan

Reliability Issues Coordinated Action Plan June 2011 10

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

6

Inte

grat

ion

of

new

te

chn

olo

gies

Planning Committee

Smart Grid Task Force

Reliability Assessment Subcommittee

10 Smart Grid impacts from distribution

systems (Address cyber aspects in 8 Non-Traditional Threats via Cyber-Security Vulnerabilities)

11 IVGTF dealing with distribution (renewables EV and conventional) resource integration

12 DRDTF addressing high levels of demand response integration

13 TIS and SPCS will provide guidance for modeling and controls systems managementcoordination

Assessment

7

Pre

par

edn

ess

for

hig

h

imp

act

low

fre

qu

ency

ev

ents

Planning Committee

Spare Equipment Database Task Force

Geomagnetic Disturbance Task Force

Operating Committee

Severe Impact Resilience Task Force

Critical Infrastructure Protection Committee

Cyber Attack Task Force

Address the risks from selected high impact low frequency events which can have unacceptable consequences on bulk power system reliability

The bulk power system has significant amounts of built-in resiliency However it has been planned and operated with the known risks to successfully manage system performance With changing threats from cyber physical and new facts about GMD industry will adjust their planning and operational activities to address these evolving risks

High 1 The Electricity Subsector Coordinating

Council has developed a BOT approved Critical Infrastructure Strategic Roadmap

5 in Q4 2010

2 The technical Committees have developed a Critical Infrastructure Strategic Initiatives Coordinated Action Plan

6 BOT approved in Q4 2010

1-2 Covered in the technical committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan

5 httpwwwnerccomdocsesccESCC_Critical_Infrastructure_Strategic_Roadmappdf

6 httpwwwnerccomdocsciscapCritical_Infrastructure_Strategic_Initiatives_Coordinated_Action_Plan_BOT_Apprd_11-2010pdf

Action Plan

Reliability Issues Coordinated Action Plan June 2011 11

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

8

No

n-t

rad

itio

nal

th

reat

s vi

a cy

ber

-se

curi

ty

vuln

erab

iliti

es

Critical Infrastructure Protection Committee

A resilient system fortified by industry planning and operational practices

The continuously evolving threat from cyber-security vulnerabilities requires new processes and procedures both for system planning and operations Industry awareness and cooperation with governmental jurisdictions are key aspects for this improved situational awareness

High

1 Also part of the deliverables in item 7 Preparedness for High Impact Low Frequency events

2 Metric development to measure cyber strength being developed with the Planning Committeersquos Smart Grid Task Force (SGTF)

3 Ongoing industry Alerts as required 4 Guidelines required to advise industry on

the establishment of appropriate cyber-security programs in their organizations

1 Covered in the technical

committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan

2 See Planning Committeersquos Strategic Plan and Action Plan along with the work plan for the SGTF

7

3 See NERCrsquos Alert website8

4 A subgroup formed to develop guidelines reviewing other industryrsquos to take advantage of existing knowledge 2012 Q4

7 httpwwwnerccomfilesSGTF_Report_Final_posted_v11pdf

8 httpwwwnerccompagephpcid=5|63

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

12

AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess

Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the

following list and abstract description was developed

1 Misoperations of relay protection and control systems ndash Nearly all major system failures

excluding perhaps those caused by severe weather have misoperations of relays or

automatic controls as a factor contributing to the propagation of the failure Protection

systems are designed to operate reliably when needed under the presence of a fault on the

system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without

allowing the fault to transfer into adjoining facilities The greater the number of facilities

involved in an event the more severe the impact to the rest of the bulk power system with

cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout

being the extreme Relays can misoperate either operate when not needed or fail to

operate when needed for a number of reasons First the device could experience an

internal failure ndash but this is rare Most commonly relays fail to operate correctly due to

incorrect settings improper coordination (of timing and set points) with other devices

ineffective maintenance and testing or failure of communications channels or power

supplies Preventable errors can be introduced by field personnel and their supervisors or

more programmatically by the organization Adding to the risk is that system protection is

an extremely complex engineering field ndashthere are many practitioners but few masters

2 Human errors by field personnel ndash Field personnel play an important role in the

maintenance and operation of the bulk power system They often are switching equipment

in and out of service and aligning alternative configurations Risks can be introduced when

field personnel operate equipment in a manner that reduces the redundancy of the bulk

power system sometimes even creating single points of failure that would not exist

normally Taking outages of equipment to conduct maintenance is a routine and necessary

part of reliable bulk power system operation However any alterations to the configuration

of the network must be carefully planned in advance to minimize loss of redundancy and

avoid unintended single points of failure It is also important that such changes and risks be

communicated to system operators and reliability coordinators in advance so that they can

make adjustments in their operating plans and reliability assessments

3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system

operators and reliability coordinators are comfortable with informal communications with

field and power plant personnel and neighboring systems Experience from analyzing

various events indicates there is often a sense of awkwardness when personnel transition

from conversational discussion to issuing reliability instructions It is also human nature to

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

13

be uncomfortable in applying formal communication procedures after personnel have

developed informal styles over many years Confusion in making the transition from normal

conversation to formal communications can introduce misunderstandings and possibly even

incorrect actions or assumptions Further once the need to transition to more formal

structure is recognized the transition is often not complete or effective Results can include

unclear instructions confusion whether an instruction is a suggestion or a directive whether

specific action is required or a set of alternative actions are permissible and confusion over

what elements of the system are being addressed

4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation

management programs as a key recommendation for avoiding future cascading failures

More broadly any encroachments in the right-of-way that reduce clearances to the point of

lowering facility ratings or reducing the randomness of possible contacts can be a risk to

reliability Although these impacts may not always be readily apparent under extreme wind

and temperature conditions they may become more of a risk to bulk power system

reliability There are many challenges to effective right-of-way maintenance especially

maintaining proper clearances including interventions by private landowners local

municipalities and federal and state landowners

5 Changing resource mix ndash Energy and environmental policies along with energy markets are

driving proposals toward unprecedented changes in the resource mix of the bulk power

system Examples include integration of significant amounts of renewable (variable such as

wind and solar) natural gas storage and demand resources to provide energy and capacity

Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a

century of operational experience with the existing resource mix However integration of

these new resources results in operating characteristics significantly different from

conventional steam production facilities An array of reliability services must be provided

over a range of time horizons from seconds to minutes to hours and days and annually such

as load following contingency reserves frequency response reactive supply capacity and

voltage control and power system stability Continued reliable operation of the bulk power

system will require an industry dialog with policymakers and regulators Understanding the

impacts on reliability will depend on accurate modeling of new resources and development

of new methods and tools for the provision of essential reliability services

6 Integration of new technologies ndash Introduction of electric vehicles demand-side

management variable generation distributed resources and smart grid technologies

presents tremendous opportunities but also introduces changes to the operating

characteristics of the bulk power system Integration of these new technologies requires

changes in the way the bulk power system is planned and operated to maintain reliability

Further additional toolsmodels are required to support their integration to meet policy and

strategic goals Without these changes it will be challenging to maintain reliability with

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

14

large-scale deployments For example some smart grid devicessystems increase exposure

to cyber threats while variable generation requires additional ancillary services Integration

of these new technologies must be achieved in a manner that does not undermine existing

levels of stability resilience and security of the bulk power system

7 Preparedness for high impact low frequency events ndash Although there is a wide range of

threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for

possible events that could debilitate the bulk power system for extended periods such as

widespread coordinated physicalcyber attacks or geomagnetic storms The industry must

consider improving the design of the bulk power system to address these potential risks and

prepare coordinated North American response plans for use during catastrophic events and

be ready to deploy those plans to restore essential services in a timely manner

8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-

based programs policies and processes to prepare for react to and recover from cyber

security vulnerabilities is a high priority for the industry The bulk power system has not yet

experienced wide-spread cyber-attacks and a contributing factor has been the traditional

physical separation between the industrial control systemSCADA environment and the

business and administrative networks This situation however is rapidly changing

predominantly due to the efficiencies that can be achieved by leveraging shared networks

and resources so now even physically separated environments are susceptible For example

the bulk power system could be as vulnerable to digital threats as IT systems but with far

more critical implications as the recent Stuxnet virus has shown Disabling or turning

systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial

control system software can be changed and data can be stolen without intrusions even

being detected These injection vectors serve as a blueprint for future attackers who wish to

access controllers safety systems and protection devices to insert malicious code targeting

changes to set points and switches as well as alteration or suppression of measurements

Standing Committee Coordination Group Roster

Reliability Issues Coordinated Action Plan

June 2011

15

SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr

Position

Name Title

Company City StateProvince

Phone E-mail

CCC Chair W Clay Smith

2100 East Exchange Place Tucker Georgia 30084-5336

(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom

CCC Vice Chair Terry L Bilke

Director Standards and Compliance

Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202

317 249-5463 317 249-5358 Fax tbilkemidwestisoorg

CCC Vice Chair Brett Hallborg

Manager of Operations Training

BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2

(604) 455-1778 bretthallborgbchydroc

om

CIPC Chair Barry Lawson

Manager Power Delivery

National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203

(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo

p

CIPC Vice Chair Cyber

Charles F Abell PE Supervising Engineer

Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103

(314) 554-3817 (314) 206-0046 Fx cfabellamerencom

CIPC Vice Chair Physical Security

Robert D Canada Business Assurance Principal

Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308

(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom

OC Chair JS Holeman

Director System Operations

Duke Energy

(704) 382-0011 SamHolemanduke-energycom

Action Plan

Reliability Issues Coordinated Action Plan June 2011 16

Position

Name Title

Company City StateProvince

Phone E-mail

OC Vice Chair Tom Bowe

Executive Director of Compliance

PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403

610-666-4776 (610) 666-4287 Fx bowetpjmcom

PC Chair Tom Burgess

Director FERC Compliance

FirstEnergy Corp

330-384-5225 burgesstfirstenergycorpcom

PC Vice Chair Jeffrey L Mitchell

Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333

(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg

PCGC Chair Jacob Burger

Transmission System Control Coordinator

Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832

(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom

SC Chair Allen Mosher

Senior Director of Policy Analysis and Reliability

American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715

(202) 467-2944 (202) 467-2992 Fx amosherappanetorg

SC Vice Chair PS (Ben) Li

President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6

(647) 388-1498 (905) 887-2235 Fx benbenlica

REMG Representative

Edward A Schwerdt President and CEO

Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703

(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg

NERC Staff Roster

Reliability Issues Coordinated Action Plan

June 2011

17

NNEERRCC SSttaaffff RRoosstteerr

Position

Name Title

PhoneE-mail

NERC Staff Alvin J (AJ) Connor

Manager of Power System Analysis (609) 751-2579 ajconnornercnet

NERC Staff Tom Galloway

Senior Vice President and Chief Reliability Officer

(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet

NERC Staff Brian M Harrell

Manager of CIP Standards Training and Awareness

(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet

NERC Staff Larry J Kezele

Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet

NERC Staff Mark G Lauby

Vice President and Director of Reliability Assessment and Performance Analysis

(609) 452-8060 (609) 452-9550 Fax marklaubynercnet

NERC Staff Maureen E Long

Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet

NERC Staff Scott R Mix

CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet

NERC Staff Michael Moon

Director of Compliance Operations

(404) 446-2560 michaelmoonnercnet

NERC Staff Andrew Rodriquez Director of Standards Development

(404) 446-2560 andyrodriqueznercnet

NERC Staff Peter Knoetgen Director of Training and Accreditation

404-446-9688 peterknoetgennercnet

NERC Staff Herb Schrayshuen

Vice President and Director of Standards

((315) 439-1390 herbschrayshuennercnet

NERC Staff Mark Weatherford

Vice President and Chief Security Officer

(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet

Action Plan

Reliability Issues Coordinated Action Plan June 2011 8

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

Medium 5 Develop process guidance for task design

(process resolutions plan the work and work the plan)

6 Support Personnel Training Standard

5 Personnel Subcommittee to prioritize and develop task design guidance Q3 2012

6 Personnel Subcommittee to develop SAR by Q4 2012

3

Am

big

uo

us

or

inco

mp

lete

vo

ice

com

mu

nic

atio

n

Standards Committee NERC Reliability Standards

Prepare and approve Reliability Standards that address communications

High 1 COM-002-3 ndash Communications and

Coordination Standard 2 COM-003-1 ndash Operating Personnel

Communications Protocols Standard

1 BOT eta Q1 2012

2 BOT eta Q4 2012

Operating Committee

Measurably improved communications in system operations

Provide guidance clarifying for operators the role of communications in improvement of reliability Should be a subset of 2 (good practices training deliverables etc)

Medium 1 Use other industries for guidance 2 Provide guidance on the benefits of using

of standard operating language or good practices separate from three-part communications Clarify for operators when communications are mission critical and when prescriptive forms impede reliability

3 Provide clear interpretations of the relevant reliability standards so that there is certainty for directives and associated communication actions

1 RCWG investigates and documents other industryrsquos experience and use of communications Report Q4 2012

2 RCWG develops guidelines on benefits from standard communication approaches Detail the use of communications to improve while not reducing reliability Q3 2013

3 Operating Committee works with NERCrsquos Compliance Operations on Compliance Application Notices (CAN) to eliminate ambiguous terms used in operations Q2 2012

4

Rig

ht-

of-

way

m

ain

ten

ance

Operating Committee (Primary Technical Committee ndash not determined)

Measurably improved right-of-way maintenance

Ensure that ROW maintenance practices result incompliance with FAC-003-2 requirements thereby maintaining reliability

High 1 Document actions undertaken that

address the facility ratings Alert results Leverage the North American Transmission Forum work for planning calculationsratings

2 Provide guidance for operational coordination among operating units TOPs RCs and BAs for different situations

1 Subgroup formed in collaboration with NERC and the Regional Entities along with the North American Transmission forum to document the result of the FAC-003-2 plans to develop industry guidance and action Q4 2011

2 Subgroup should develop guidelines for coordination among TOPs RCs and BAs Q4 2012

Action Plan

Reliability Issues Coordinated Action Plan June 2011 9

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

Standards Committee NERC Reliability Standards

Prepare and achieve approval of Reliability Standard for Transmission Vegetation Management

Low 1 FAC-003-2 ndash Transmission Vegetation

Management 1 BOT eta Q3 2011

5

Ch

angi

ng

reso

urc

e m

ix

Planning Committee

Reliability Assessment Subcommittee

Integration of Variable Generation Task Force

Smart Grid Task Force

Ready industry for the changing resource mix and technology integration by providing guidance and input into NERCrsquos Reliability Standards

Unprecedented change in resource mix being realized through retirement of aging units capital fuel costs along with environmental regulations This change along with technological advances in communications and control can change the well understood character of the bulk power system requiring changes in the planning approaches to ensure operational reliability

Medium 1 IVGTF ndash addressing frequency voltage

response resource flexibility contingency reserves

2 SGTF ndash addressing reliability impacts 3 RIS-RAS - addressing scenarios resource

mix planning probabilistic assessments 4 Scenarios that address resource mix

implications such as natural gas interdependence

5 Evaluate benefit of probabilistic metrics and provide guidance to plannersoperators

6 Develop targetsmetricsrefinements for planningoperation

7 Provide guidance on tools for operators 8 Develop potential standards proposals

or guidanceadvisories that enhance reliability

9 Provide recommendations for expanded planning assessments to address resource mix changes

1 through 13 See Planning Committeersquos Strategic Plan

3

and Action Plan4

3 through 6 Resource Issues and Reliability Assessment Subcommittees

Annual Summer Reliability Assessment

Annual Winter Reliability Assessment

Annual Long-Term Reliability Assessment o Scenarios o Emerging Issues o Probabilistic

3 httpwwwnerccomdocspcAgendaItem_5a_PC_2011-2016_Strategic_Plan_v5_LINKpdf

4 httpwwwnerccomdocspcAgendaItem_5ai_PC_Strategic_Plan_Next20Steps2020Future20Work20Plan_v5_LINKpdf

Action Plan

Reliability Issues Coordinated Action Plan June 2011 10

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

6

Inte

grat

ion

of

new

te

chn

olo

gies

Planning Committee

Smart Grid Task Force

Reliability Assessment Subcommittee

10 Smart Grid impacts from distribution

systems (Address cyber aspects in 8 Non-Traditional Threats via Cyber-Security Vulnerabilities)

11 IVGTF dealing with distribution (renewables EV and conventional) resource integration

12 DRDTF addressing high levels of demand response integration

13 TIS and SPCS will provide guidance for modeling and controls systems managementcoordination

Assessment

7

Pre

par

edn

ess

for

hig

h

imp

act

low

fre

qu

ency

ev

ents

Planning Committee

Spare Equipment Database Task Force

Geomagnetic Disturbance Task Force

Operating Committee

Severe Impact Resilience Task Force

Critical Infrastructure Protection Committee

Cyber Attack Task Force

Address the risks from selected high impact low frequency events which can have unacceptable consequences on bulk power system reliability

The bulk power system has significant amounts of built-in resiliency However it has been planned and operated with the known risks to successfully manage system performance With changing threats from cyber physical and new facts about GMD industry will adjust their planning and operational activities to address these evolving risks

High 1 The Electricity Subsector Coordinating

Council has developed a BOT approved Critical Infrastructure Strategic Roadmap

5 in Q4 2010

2 The technical Committees have developed a Critical Infrastructure Strategic Initiatives Coordinated Action Plan

6 BOT approved in Q4 2010

1-2 Covered in the technical committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan

5 httpwwwnerccomdocsesccESCC_Critical_Infrastructure_Strategic_Roadmappdf

6 httpwwwnerccomdocsciscapCritical_Infrastructure_Strategic_Initiatives_Coordinated_Action_Plan_BOT_Apprd_11-2010pdf

Action Plan

Reliability Issues Coordinated Action Plan June 2011 11

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

8

No

n-t

rad

itio

nal

th

reat

s vi

a cy

ber

-se

curi

ty

vuln

erab

iliti

es

Critical Infrastructure Protection Committee

A resilient system fortified by industry planning and operational practices

The continuously evolving threat from cyber-security vulnerabilities requires new processes and procedures both for system planning and operations Industry awareness and cooperation with governmental jurisdictions are key aspects for this improved situational awareness

High

1 Also part of the deliverables in item 7 Preparedness for High Impact Low Frequency events

2 Metric development to measure cyber strength being developed with the Planning Committeersquos Smart Grid Task Force (SGTF)

3 Ongoing industry Alerts as required 4 Guidelines required to advise industry on

the establishment of appropriate cyber-security programs in their organizations

1 Covered in the technical

committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan

2 See Planning Committeersquos Strategic Plan and Action Plan along with the work plan for the SGTF

7

3 See NERCrsquos Alert website8

4 A subgroup formed to develop guidelines reviewing other industryrsquos to take advantage of existing knowledge 2012 Q4

7 httpwwwnerccomfilesSGTF_Report_Final_posted_v11pdf

8 httpwwwnerccompagephpcid=5|63

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

12

AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess

Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the

following list and abstract description was developed

1 Misoperations of relay protection and control systems ndash Nearly all major system failures

excluding perhaps those caused by severe weather have misoperations of relays or

automatic controls as a factor contributing to the propagation of the failure Protection

systems are designed to operate reliably when needed under the presence of a fault on the

system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without

allowing the fault to transfer into adjoining facilities The greater the number of facilities

involved in an event the more severe the impact to the rest of the bulk power system with

cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout

being the extreme Relays can misoperate either operate when not needed or fail to

operate when needed for a number of reasons First the device could experience an

internal failure ndash but this is rare Most commonly relays fail to operate correctly due to

incorrect settings improper coordination (of timing and set points) with other devices

ineffective maintenance and testing or failure of communications channels or power

supplies Preventable errors can be introduced by field personnel and their supervisors or

more programmatically by the organization Adding to the risk is that system protection is

an extremely complex engineering field ndashthere are many practitioners but few masters

2 Human errors by field personnel ndash Field personnel play an important role in the

maintenance and operation of the bulk power system They often are switching equipment

in and out of service and aligning alternative configurations Risks can be introduced when

field personnel operate equipment in a manner that reduces the redundancy of the bulk

power system sometimes even creating single points of failure that would not exist

normally Taking outages of equipment to conduct maintenance is a routine and necessary

part of reliable bulk power system operation However any alterations to the configuration

of the network must be carefully planned in advance to minimize loss of redundancy and

avoid unintended single points of failure It is also important that such changes and risks be

communicated to system operators and reliability coordinators in advance so that they can

make adjustments in their operating plans and reliability assessments

3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system

operators and reliability coordinators are comfortable with informal communications with

field and power plant personnel and neighboring systems Experience from analyzing

various events indicates there is often a sense of awkwardness when personnel transition

from conversational discussion to issuing reliability instructions It is also human nature to

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

13

be uncomfortable in applying formal communication procedures after personnel have

developed informal styles over many years Confusion in making the transition from normal

conversation to formal communications can introduce misunderstandings and possibly even

incorrect actions or assumptions Further once the need to transition to more formal

structure is recognized the transition is often not complete or effective Results can include

unclear instructions confusion whether an instruction is a suggestion or a directive whether

specific action is required or a set of alternative actions are permissible and confusion over

what elements of the system are being addressed

4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation

management programs as a key recommendation for avoiding future cascading failures

More broadly any encroachments in the right-of-way that reduce clearances to the point of

lowering facility ratings or reducing the randomness of possible contacts can be a risk to

reliability Although these impacts may not always be readily apparent under extreme wind

and temperature conditions they may become more of a risk to bulk power system

reliability There are many challenges to effective right-of-way maintenance especially

maintaining proper clearances including interventions by private landowners local

municipalities and federal and state landowners

5 Changing resource mix ndash Energy and environmental policies along with energy markets are

driving proposals toward unprecedented changes in the resource mix of the bulk power

system Examples include integration of significant amounts of renewable (variable such as

wind and solar) natural gas storage and demand resources to provide energy and capacity

Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a

century of operational experience with the existing resource mix However integration of

these new resources results in operating characteristics significantly different from

conventional steam production facilities An array of reliability services must be provided

over a range of time horizons from seconds to minutes to hours and days and annually such

as load following contingency reserves frequency response reactive supply capacity and

voltage control and power system stability Continued reliable operation of the bulk power

system will require an industry dialog with policymakers and regulators Understanding the

impacts on reliability will depend on accurate modeling of new resources and development

of new methods and tools for the provision of essential reliability services

6 Integration of new technologies ndash Introduction of electric vehicles demand-side

management variable generation distributed resources and smart grid technologies

presents tremendous opportunities but also introduces changes to the operating

characteristics of the bulk power system Integration of these new technologies requires

changes in the way the bulk power system is planned and operated to maintain reliability

Further additional toolsmodels are required to support their integration to meet policy and

strategic goals Without these changes it will be challenging to maintain reliability with

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

14

large-scale deployments For example some smart grid devicessystems increase exposure

to cyber threats while variable generation requires additional ancillary services Integration

of these new technologies must be achieved in a manner that does not undermine existing

levels of stability resilience and security of the bulk power system

7 Preparedness for high impact low frequency events ndash Although there is a wide range of

threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for

possible events that could debilitate the bulk power system for extended periods such as

widespread coordinated physicalcyber attacks or geomagnetic storms The industry must

consider improving the design of the bulk power system to address these potential risks and

prepare coordinated North American response plans for use during catastrophic events and

be ready to deploy those plans to restore essential services in a timely manner

8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-

based programs policies and processes to prepare for react to and recover from cyber

security vulnerabilities is a high priority for the industry The bulk power system has not yet

experienced wide-spread cyber-attacks and a contributing factor has been the traditional

physical separation between the industrial control systemSCADA environment and the

business and administrative networks This situation however is rapidly changing

predominantly due to the efficiencies that can be achieved by leveraging shared networks

and resources so now even physically separated environments are susceptible For example

the bulk power system could be as vulnerable to digital threats as IT systems but with far

more critical implications as the recent Stuxnet virus has shown Disabling or turning

systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial

control system software can be changed and data can be stolen without intrusions even

being detected These injection vectors serve as a blueprint for future attackers who wish to

access controllers safety systems and protection devices to insert malicious code targeting

changes to set points and switches as well as alteration or suppression of measurements

Standing Committee Coordination Group Roster

Reliability Issues Coordinated Action Plan

June 2011

15

SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr

Position

Name Title

Company City StateProvince

Phone E-mail

CCC Chair W Clay Smith

2100 East Exchange Place Tucker Georgia 30084-5336

(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom

CCC Vice Chair Terry L Bilke

Director Standards and Compliance

Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202

317 249-5463 317 249-5358 Fax tbilkemidwestisoorg

CCC Vice Chair Brett Hallborg

Manager of Operations Training

BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2

(604) 455-1778 bretthallborgbchydroc

om

CIPC Chair Barry Lawson

Manager Power Delivery

National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203

(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo

p

CIPC Vice Chair Cyber

Charles F Abell PE Supervising Engineer

Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103

(314) 554-3817 (314) 206-0046 Fx cfabellamerencom

CIPC Vice Chair Physical Security

Robert D Canada Business Assurance Principal

Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308

(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom

OC Chair JS Holeman

Director System Operations

Duke Energy

(704) 382-0011 SamHolemanduke-energycom

Action Plan

Reliability Issues Coordinated Action Plan June 2011 16

Position

Name Title

Company City StateProvince

Phone E-mail

OC Vice Chair Tom Bowe

Executive Director of Compliance

PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403

610-666-4776 (610) 666-4287 Fx bowetpjmcom

PC Chair Tom Burgess

Director FERC Compliance

FirstEnergy Corp

330-384-5225 burgesstfirstenergycorpcom

PC Vice Chair Jeffrey L Mitchell

Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333

(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg

PCGC Chair Jacob Burger

Transmission System Control Coordinator

Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832

(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom

SC Chair Allen Mosher

Senior Director of Policy Analysis and Reliability

American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715

(202) 467-2944 (202) 467-2992 Fx amosherappanetorg

SC Vice Chair PS (Ben) Li

President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6

(647) 388-1498 (905) 887-2235 Fx benbenlica

REMG Representative

Edward A Schwerdt President and CEO

Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703

(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg

NERC Staff Roster

Reliability Issues Coordinated Action Plan

June 2011

17

NNEERRCC SSttaaffff RRoosstteerr

Position

Name Title

PhoneE-mail

NERC Staff Alvin J (AJ) Connor

Manager of Power System Analysis (609) 751-2579 ajconnornercnet

NERC Staff Tom Galloway

Senior Vice President and Chief Reliability Officer

(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet

NERC Staff Brian M Harrell

Manager of CIP Standards Training and Awareness

(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet

NERC Staff Larry J Kezele

Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet

NERC Staff Mark G Lauby

Vice President and Director of Reliability Assessment and Performance Analysis

(609) 452-8060 (609) 452-9550 Fax marklaubynercnet

NERC Staff Maureen E Long

Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet

NERC Staff Scott R Mix

CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet

NERC Staff Michael Moon

Director of Compliance Operations

(404) 446-2560 michaelmoonnercnet

NERC Staff Andrew Rodriquez Director of Standards Development

(404) 446-2560 andyrodriqueznercnet

NERC Staff Peter Knoetgen Director of Training and Accreditation

404-446-9688 peterknoetgennercnet

NERC Staff Herb Schrayshuen

Vice President and Director of Standards

((315) 439-1390 herbschrayshuennercnet

NERC Staff Mark Weatherford

Vice President and Chief Security Officer

(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet

Action Plan

Reliability Issues Coordinated Action Plan June 2011 9

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

Standards Committee NERC Reliability Standards

Prepare and achieve approval of Reliability Standard for Transmission Vegetation Management

Low 1 FAC-003-2 ndash Transmission Vegetation

Management 1 BOT eta Q3 2011

5

Ch

angi

ng

reso

urc

e m

ix

Planning Committee

Reliability Assessment Subcommittee

Integration of Variable Generation Task Force

Smart Grid Task Force

Ready industry for the changing resource mix and technology integration by providing guidance and input into NERCrsquos Reliability Standards

Unprecedented change in resource mix being realized through retirement of aging units capital fuel costs along with environmental regulations This change along with technological advances in communications and control can change the well understood character of the bulk power system requiring changes in the planning approaches to ensure operational reliability

Medium 1 IVGTF ndash addressing frequency voltage

response resource flexibility contingency reserves

2 SGTF ndash addressing reliability impacts 3 RIS-RAS - addressing scenarios resource

mix planning probabilistic assessments 4 Scenarios that address resource mix

implications such as natural gas interdependence

5 Evaluate benefit of probabilistic metrics and provide guidance to plannersoperators

6 Develop targetsmetricsrefinements for planningoperation

7 Provide guidance on tools for operators 8 Develop potential standards proposals

or guidanceadvisories that enhance reliability

9 Provide recommendations for expanded planning assessments to address resource mix changes

1 through 13 See Planning Committeersquos Strategic Plan

3

and Action Plan4

3 through 6 Resource Issues and Reliability Assessment Subcommittees

Annual Summer Reliability Assessment

Annual Winter Reliability Assessment

Annual Long-Term Reliability Assessment o Scenarios o Emerging Issues o Probabilistic

3 httpwwwnerccomdocspcAgendaItem_5a_PC_2011-2016_Strategic_Plan_v5_LINKpdf

4 httpwwwnerccomdocspcAgendaItem_5ai_PC_Strategic_Plan_Next20Steps2020Future20Work20Plan_v5_LINKpdf

Action Plan

Reliability Issues Coordinated Action Plan June 2011 10

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

6

Inte

grat

ion

of

new

te

chn

olo

gies

Planning Committee

Smart Grid Task Force

Reliability Assessment Subcommittee

10 Smart Grid impacts from distribution

systems (Address cyber aspects in 8 Non-Traditional Threats via Cyber-Security Vulnerabilities)

11 IVGTF dealing with distribution (renewables EV and conventional) resource integration

12 DRDTF addressing high levels of demand response integration

13 TIS and SPCS will provide guidance for modeling and controls systems managementcoordination

Assessment

7

Pre

par

edn

ess

for

hig

h

imp

act

low

fre

qu

ency

ev

ents

Planning Committee

Spare Equipment Database Task Force

Geomagnetic Disturbance Task Force

Operating Committee

Severe Impact Resilience Task Force

Critical Infrastructure Protection Committee

Cyber Attack Task Force

Address the risks from selected high impact low frequency events which can have unacceptable consequences on bulk power system reliability

The bulk power system has significant amounts of built-in resiliency However it has been planned and operated with the known risks to successfully manage system performance With changing threats from cyber physical and new facts about GMD industry will adjust their planning and operational activities to address these evolving risks

High 1 The Electricity Subsector Coordinating

Council has developed a BOT approved Critical Infrastructure Strategic Roadmap

5 in Q4 2010

2 The technical Committees have developed a Critical Infrastructure Strategic Initiatives Coordinated Action Plan

6 BOT approved in Q4 2010

1-2 Covered in the technical committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan

5 httpwwwnerccomdocsesccESCC_Critical_Infrastructure_Strategic_Roadmappdf

6 httpwwwnerccomdocsciscapCritical_Infrastructure_Strategic_Initiatives_Coordinated_Action_Plan_BOT_Apprd_11-2010pdf

Action Plan

Reliability Issues Coordinated Action Plan June 2011 11

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

8

No

n-t

rad

itio

nal

th

reat

s vi

a cy

ber

-se

curi

ty

vuln

erab

iliti

es

Critical Infrastructure Protection Committee

A resilient system fortified by industry planning and operational practices

The continuously evolving threat from cyber-security vulnerabilities requires new processes and procedures both for system planning and operations Industry awareness and cooperation with governmental jurisdictions are key aspects for this improved situational awareness

High

1 Also part of the deliverables in item 7 Preparedness for High Impact Low Frequency events

2 Metric development to measure cyber strength being developed with the Planning Committeersquos Smart Grid Task Force (SGTF)

3 Ongoing industry Alerts as required 4 Guidelines required to advise industry on

the establishment of appropriate cyber-security programs in their organizations

1 Covered in the technical

committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan

2 See Planning Committeersquos Strategic Plan and Action Plan along with the work plan for the SGTF

7

3 See NERCrsquos Alert website8

4 A subgroup formed to develop guidelines reviewing other industryrsquos to take advantage of existing knowledge 2012 Q4

7 httpwwwnerccomfilesSGTF_Report_Final_posted_v11pdf

8 httpwwwnerccompagephpcid=5|63

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

12

AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess

Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the

following list and abstract description was developed

1 Misoperations of relay protection and control systems ndash Nearly all major system failures

excluding perhaps those caused by severe weather have misoperations of relays or

automatic controls as a factor contributing to the propagation of the failure Protection

systems are designed to operate reliably when needed under the presence of a fault on the

system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without

allowing the fault to transfer into adjoining facilities The greater the number of facilities

involved in an event the more severe the impact to the rest of the bulk power system with

cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout

being the extreme Relays can misoperate either operate when not needed or fail to

operate when needed for a number of reasons First the device could experience an

internal failure ndash but this is rare Most commonly relays fail to operate correctly due to

incorrect settings improper coordination (of timing and set points) with other devices

ineffective maintenance and testing or failure of communications channels or power

supplies Preventable errors can be introduced by field personnel and their supervisors or

more programmatically by the organization Adding to the risk is that system protection is

an extremely complex engineering field ndashthere are many practitioners but few masters

2 Human errors by field personnel ndash Field personnel play an important role in the

maintenance and operation of the bulk power system They often are switching equipment

in and out of service and aligning alternative configurations Risks can be introduced when

field personnel operate equipment in a manner that reduces the redundancy of the bulk

power system sometimes even creating single points of failure that would not exist

normally Taking outages of equipment to conduct maintenance is a routine and necessary

part of reliable bulk power system operation However any alterations to the configuration

of the network must be carefully planned in advance to minimize loss of redundancy and

avoid unintended single points of failure It is also important that such changes and risks be

communicated to system operators and reliability coordinators in advance so that they can

make adjustments in their operating plans and reliability assessments

3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system

operators and reliability coordinators are comfortable with informal communications with

field and power plant personnel and neighboring systems Experience from analyzing

various events indicates there is often a sense of awkwardness when personnel transition

from conversational discussion to issuing reliability instructions It is also human nature to

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

13

be uncomfortable in applying formal communication procedures after personnel have

developed informal styles over many years Confusion in making the transition from normal

conversation to formal communications can introduce misunderstandings and possibly even

incorrect actions or assumptions Further once the need to transition to more formal

structure is recognized the transition is often not complete or effective Results can include

unclear instructions confusion whether an instruction is a suggestion or a directive whether

specific action is required or a set of alternative actions are permissible and confusion over

what elements of the system are being addressed

4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation

management programs as a key recommendation for avoiding future cascading failures

More broadly any encroachments in the right-of-way that reduce clearances to the point of

lowering facility ratings or reducing the randomness of possible contacts can be a risk to

reliability Although these impacts may not always be readily apparent under extreme wind

and temperature conditions they may become more of a risk to bulk power system

reliability There are many challenges to effective right-of-way maintenance especially

maintaining proper clearances including interventions by private landowners local

municipalities and federal and state landowners

5 Changing resource mix ndash Energy and environmental policies along with energy markets are

driving proposals toward unprecedented changes in the resource mix of the bulk power

system Examples include integration of significant amounts of renewable (variable such as

wind and solar) natural gas storage and demand resources to provide energy and capacity

Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a

century of operational experience with the existing resource mix However integration of

these new resources results in operating characteristics significantly different from

conventional steam production facilities An array of reliability services must be provided

over a range of time horizons from seconds to minutes to hours and days and annually such

as load following contingency reserves frequency response reactive supply capacity and

voltage control and power system stability Continued reliable operation of the bulk power

system will require an industry dialog with policymakers and regulators Understanding the

impacts on reliability will depend on accurate modeling of new resources and development

of new methods and tools for the provision of essential reliability services

6 Integration of new technologies ndash Introduction of electric vehicles demand-side

management variable generation distributed resources and smart grid technologies

presents tremendous opportunities but also introduces changes to the operating

characteristics of the bulk power system Integration of these new technologies requires

changes in the way the bulk power system is planned and operated to maintain reliability

Further additional toolsmodels are required to support their integration to meet policy and

strategic goals Without these changes it will be challenging to maintain reliability with

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

14

large-scale deployments For example some smart grid devicessystems increase exposure

to cyber threats while variable generation requires additional ancillary services Integration

of these new technologies must be achieved in a manner that does not undermine existing

levels of stability resilience and security of the bulk power system

7 Preparedness for high impact low frequency events ndash Although there is a wide range of

threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for

possible events that could debilitate the bulk power system for extended periods such as

widespread coordinated physicalcyber attacks or geomagnetic storms The industry must

consider improving the design of the bulk power system to address these potential risks and

prepare coordinated North American response plans for use during catastrophic events and

be ready to deploy those plans to restore essential services in a timely manner

8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-

based programs policies and processes to prepare for react to and recover from cyber

security vulnerabilities is a high priority for the industry The bulk power system has not yet

experienced wide-spread cyber-attacks and a contributing factor has been the traditional

physical separation between the industrial control systemSCADA environment and the

business and administrative networks This situation however is rapidly changing

predominantly due to the efficiencies that can be achieved by leveraging shared networks

and resources so now even physically separated environments are susceptible For example

the bulk power system could be as vulnerable to digital threats as IT systems but with far

more critical implications as the recent Stuxnet virus has shown Disabling or turning

systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial

control system software can be changed and data can be stolen without intrusions even

being detected These injection vectors serve as a blueprint for future attackers who wish to

access controllers safety systems and protection devices to insert malicious code targeting

changes to set points and switches as well as alteration or suppression of measurements

Standing Committee Coordination Group Roster

Reliability Issues Coordinated Action Plan

June 2011

15

SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr

Position

Name Title

Company City StateProvince

Phone E-mail

CCC Chair W Clay Smith

2100 East Exchange Place Tucker Georgia 30084-5336

(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom

CCC Vice Chair Terry L Bilke

Director Standards and Compliance

Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202

317 249-5463 317 249-5358 Fax tbilkemidwestisoorg

CCC Vice Chair Brett Hallborg

Manager of Operations Training

BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2

(604) 455-1778 bretthallborgbchydroc

om

CIPC Chair Barry Lawson

Manager Power Delivery

National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203

(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo

p

CIPC Vice Chair Cyber

Charles F Abell PE Supervising Engineer

Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103

(314) 554-3817 (314) 206-0046 Fx cfabellamerencom

CIPC Vice Chair Physical Security

Robert D Canada Business Assurance Principal

Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308

(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom

OC Chair JS Holeman

Director System Operations

Duke Energy

(704) 382-0011 SamHolemanduke-energycom

Action Plan

Reliability Issues Coordinated Action Plan June 2011 16

Position

Name Title

Company City StateProvince

Phone E-mail

OC Vice Chair Tom Bowe

Executive Director of Compliance

PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403

610-666-4776 (610) 666-4287 Fx bowetpjmcom

PC Chair Tom Burgess

Director FERC Compliance

FirstEnergy Corp

330-384-5225 burgesstfirstenergycorpcom

PC Vice Chair Jeffrey L Mitchell

Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333

(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg

PCGC Chair Jacob Burger

Transmission System Control Coordinator

Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832

(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom

SC Chair Allen Mosher

Senior Director of Policy Analysis and Reliability

American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715

(202) 467-2944 (202) 467-2992 Fx amosherappanetorg

SC Vice Chair PS (Ben) Li

President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6

(647) 388-1498 (905) 887-2235 Fx benbenlica

REMG Representative

Edward A Schwerdt President and CEO

Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703

(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg

NERC Staff Roster

Reliability Issues Coordinated Action Plan

June 2011

17

NNEERRCC SSttaaffff RRoosstteerr

Position

Name Title

PhoneE-mail

NERC Staff Alvin J (AJ) Connor

Manager of Power System Analysis (609) 751-2579 ajconnornercnet

NERC Staff Tom Galloway

Senior Vice President and Chief Reliability Officer

(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet

NERC Staff Brian M Harrell

Manager of CIP Standards Training and Awareness

(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet

NERC Staff Larry J Kezele

Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet

NERC Staff Mark G Lauby

Vice President and Director of Reliability Assessment and Performance Analysis

(609) 452-8060 (609) 452-9550 Fax marklaubynercnet

NERC Staff Maureen E Long

Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet

NERC Staff Scott R Mix

CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet

NERC Staff Michael Moon

Director of Compliance Operations

(404) 446-2560 michaelmoonnercnet

NERC Staff Andrew Rodriquez Director of Standards Development

(404) 446-2560 andyrodriqueznercnet

NERC Staff Peter Knoetgen Director of Training and Accreditation

404-446-9688 peterknoetgennercnet

NERC Staff Herb Schrayshuen

Vice President and Director of Standards

((315) 439-1390 herbschrayshuennercnet

NERC Staff Mark Weatherford

Vice President and Chief Security Officer

(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet

Action Plan

Reliability Issues Coordinated Action Plan June 2011 10

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

6

Inte

grat

ion

of

new

te

chn

olo

gies

Planning Committee

Smart Grid Task Force

Reliability Assessment Subcommittee

10 Smart Grid impacts from distribution

systems (Address cyber aspects in 8 Non-Traditional Threats via Cyber-Security Vulnerabilities)

11 IVGTF dealing with distribution (renewables EV and conventional) resource integration

12 DRDTF addressing high levels of demand response integration

13 TIS and SPCS will provide guidance for modeling and controls systems managementcoordination

Assessment

7

Pre

par

edn

ess

for

hig

h

imp

act

low

fre

qu

ency

ev

ents

Planning Committee

Spare Equipment Database Task Force

Geomagnetic Disturbance Task Force

Operating Committee

Severe Impact Resilience Task Force

Critical Infrastructure Protection Committee

Cyber Attack Task Force

Address the risks from selected high impact low frequency events which can have unacceptable consequences on bulk power system reliability

The bulk power system has significant amounts of built-in resiliency However it has been planned and operated with the known risks to successfully manage system performance With changing threats from cyber physical and new facts about GMD industry will adjust their planning and operational activities to address these evolving risks

High 1 The Electricity Subsector Coordinating

Council has developed a BOT approved Critical Infrastructure Strategic Roadmap

5 in Q4 2010

2 The technical Committees have developed a Critical Infrastructure Strategic Initiatives Coordinated Action Plan

6 BOT approved in Q4 2010

1-2 Covered in the technical committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan

5 httpwwwnerccomdocsesccESCC_Critical_Infrastructure_Strategic_Roadmappdf

6 httpwwwnerccomdocsciscapCritical_Infrastructure_Strategic_Initiatives_Coordinated_Action_Plan_BOT_Apprd_11-2010pdf

Action Plan

Reliability Issues Coordinated Action Plan June 2011 11

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

8

No

n-t

rad

itio

nal

th

reat

s vi

a cy

ber

-se

curi

ty

vuln

erab

iliti

es

Critical Infrastructure Protection Committee

A resilient system fortified by industry planning and operational practices

The continuously evolving threat from cyber-security vulnerabilities requires new processes and procedures both for system planning and operations Industry awareness and cooperation with governmental jurisdictions are key aspects for this improved situational awareness

High

1 Also part of the deliverables in item 7 Preparedness for High Impact Low Frequency events

2 Metric development to measure cyber strength being developed with the Planning Committeersquos Smart Grid Task Force (SGTF)

3 Ongoing industry Alerts as required 4 Guidelines required to advise industry on

the establishment of appropriate cyber-security programs in their organizations

1 Covered in the technical

committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan

2 See Planning Committeersquos Strategic Plan and Action Plan along with the work plan for the SGTF

7

3 See NERCrsquos Alert website8

4 A subgroup formed to develop guidelines reviewing other industryrsquos to take advantage of existing knowledge 2012 Q4

7 httpwwwnerccomfilesSGTF_Report_Final_posted_v11pdf

8 httpwwwnerccompagephpcid=5|63

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

12

AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess

Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the

following list and abstract description was developed

1 Misoperations of relay protection and control systems ndash Nearly all major system failures

excluding perhaps those caused by severe weather have misoperations of relays or

automatic controls as a factor contributing to the propagation of the failure Protection

systems are designed to operate reliably when needed under the presence of a fault on the

system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without

allowing the fault to transfer into adjoining facilities The greater the number of facilities

involved in an event the more severe the impact to the rest of the bulk power system with

cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout

being the extreme Relays can misoperate either operate when not needed or fail to

operate when needed for a number of reasons First the device could experience an

internal failure ndash but this is rare Most commonly relays fail to operate correctly due to

incorrect settings improper coordination (of timing and set points) with other devices

ineffective maintenance and testing or failure of communications channels or power

supplies Preventable errors can be introduced by field personnel and their supervisors or

more programmatically by the organization Adding to the risk is that system protection is

an extremely complex engineering field ndashthere are many practitioners but few masters

2 Human errors by field personnel ndash Field personnel play an important role in the

maintenance and operation of the bulk power system They often are switching equipment

in and out of service and aligning alternative configurations Risks can be introduced when

field personnel operate equipment in a manner that reduces the redundancy of the bulk

power system sometimes even creating single points of failure that would not exist

normally Taking outages of equipment to conduct maintenance is a routine and necessary

part of reliable bulk power system operation However any alterations to the configuration

of the network must be carefully planned in advance to minimize loss of redundancy and

avoid unintended single points of failure It is also important that such changes and risks be

communicated to system operators and reliability coordinators in advance so that they can

make adjustments in their operating plans and reliability assessments

3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system

operators and reliability coordinators are comfortable with informal communications with

field and power plant personnel and neighboring systems Experience from analyzing

various events indicates there is often a sense of awkwardness when personnel transition

from conversational discussion to issuing reliability instructions It is also human nature to

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

13

be uncomfortable in applying formal communication procedures after personnel have

developed informal styles over many years Confusion in making the transition from normal

conversation to formal communications can introduce misunderstandings and possibly even

incorrect actions or assumptions Further once the need to transition to more formal

structure is recognized the transition is often not complete or effective Results can include

unclear instructions confusion whether an instruction is a suggestion or a directive whether

specific action is required or a set of alternative actions are permissible and confusion over

what elements of the system are being addressed

4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation

management programs as a key recommendation for avoiding future cascading failures

More broadly any encroachments in the right-of-way that reduce clearances to the point of

lowering facility ratings or reducing the randomness of possible contacts can be a risk to

reliability Although these impacts may not always be readily apparent under extreme wind

and temperature conditions they may become more of a risk to bulk power system

reliability There are many challenges to effective right-of-way maintenance especially

maintaining proper clearances including interventions by private landowners local

municipalities and federal and state landowners

5 Changing resource mix ndash Energy and environmental policies along with energy markets are

driving proposals toward unprecedented changes in the resource mix of the bulk power

system Examples include integration of significant amounts of renewable (variable such as

wind and solar) natural gas storage and demand resources to provide energy and capacity

Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a

century of operational experience with the existing resource mix However integration of

these new resources results in operating characteristics significantly different from

conventional steam production facilities An array of reliability services must be provided

over a range of time horizons from seconds to minutes to hours and days and annually such

as load following contingency reserves frequency response reactive supply capacity and

voltage control and power system stability Continued reliable operation of the bulk power

system will require an industry dialog with policymakers and regulators Understanding the

impacts on reliability will depend on accurate modeling of new resources and development

of new methods and tools for the provision of essential reliability services

6 Integration of new technologies ndash Introduction of electric vehicles demand-side

management variable generation distributed resources and smart grid technologies

presents tremendous opportunities but also introduces changes to the operating

characteristics of the bulk power system Integration of these new technologies requires

changes in the way the bulk power system is planned and operated to maintain reliability

Further additional toolsmodels are required to support their integration to meet policy and

strategic goals Without these changes it will be challenging to maintain reliability with

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

14

large-scale deployments For example some smart grid devicessystems increase exposure

to cyber threats while variable generation requires additional ancillary services Integration

of these new technologies must be achieved in a manner that does not undermine existing

levels of stability resilience and security of the bulk power system

7 Preparedness for high impact low frequency events ndash Although there is a wide range of

threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for

possible events that could debilitate the bulk power system for extended periods such as

widespread coordinated physicalcyber attacks or geomagnetic storms The industry must

consider improving the design of the bulk power system to address these potential risks and

prepare coordinated North American response plans for use during catastrophic events and

be ready to deploy those plans to restore essential services in a timely manner

8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-

based programs policies and processes to prepare for react to and recover from cyber

security vulnerabilities is a high priority for the industry The bulk power system has not yet

experienced wide-spread cyber-attacks and a contributing factor has been the traditional

physical separation between the industrial control systemSCADA environment and the

business and administrative networks This situation however is rapidly changing

predominantly due to the efficiencies that can be achieved by leveraging shared networks

and resources so now even physically separated environments are susceptible For example

the bulk power system could be as vulnerable to digital threats as IT systems but with far

more critical implications as the recent Stuxnet virus has shown Disabling or turning

systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial

control system software can be changed and data can be stolen without intrusions even

being detected These injection vectors serve as a blueprint for future attackers who wish to

access controllers safety systems and protection devices to insert malicious code targeting

changes to set points and switches as well as alteration or suppression of measurements

Standing Committee Coordination Group Roster

Reliability Issues Coordinated Action Plan

June 2011

15

SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr

Position

Name Title

Company City StateProvince

Phone E-mail

CCC Chair W Clay Smith

2100 East Exchange Place Tucker Georgia 30084-5336

(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom

CCC Vice Chair Terry L Bilke

Director Standards and Compliance

Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202

317 249-5463 317 249-5358 Fax tbilkemidwestisoorg

CCC Vice Chair Brett Hallborg

Manager of Operations Training

BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2

(604) 455-1778 bretthallborgbchydroc

om

CIPC Chair Barry Lawson

Manager Power Delivery

National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203

(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo

p

CIPC Vice Chair Cyber

Charles F Abell PE Supervising Engineer

Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103

(314) 554-3817 (314) 206-0046 Fx cfabellamerencom

CIPC Vice Chair Physical Security

Robert D Canada Business Assurance Principal

Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308

(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom

OC Chair JS Holeman

Director System Operations

Duke Energy

(704) 382-0011 SamHolemanduke-energycom

Action Plan

Reliability Issues Coordinated Action Plan June 2011 16

Position

Name Title

Company City StateProvince

Phone E-mail

OC Vice Chair Tom Bowe

Executive Director of Compliance

PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403

610-666-4776 (610) 666-4287 Fx bowetpjmcom

PC Chair Tom Burgess

Director FERC Compliance

FirstEnergy Corp

330-384-5225 burgesstfirstenergycorpcom

PC Vice Chair Jeffrey L Mitchell

Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333

(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg

PCGC Chair Jacob Burger

Transmission System Control Coordinator

Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832

(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom

SC Chair Allen Mosher

Senior Director of Policy Analysis and Reliability

American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715

(202) 467-2944 (202) 467-2992 Fx amosherappanetorg

SC Vice Chair PS (Ben) Li

President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6

(647) 388-1498 (905) 887-2235 Fx benbenlica

REMG Representative

Edward A Schwerdt President and CEO

Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703

(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg

NERC Staff Roster

Reliability Issues Coordinated Action Plan

June 2011

17

NNEERRCC SSttaaffff RRoosstteerr

Position

Name Title

PhoneE-mail

NERC Staff Alvin J (AJ) Connor

Manager of Power System Analysis (609) 751-2579 ajconnornercnet

NERC Staff Tom Galloway

Senior Vice President and Chief Reliability Officer

(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet

NERC Staff Brian M Harrell

Manager of CIP Standards Training and Awareness

(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet

NERC Staff Larry J Kezele

Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet

NERC Staff Mark G Lauby

Vice President and Director of Reliability Assessment and Performance Analysis

(609) 452-8060 (609) 452-9550 Fax marklaubynercnet

NERC Staff Maureen E Long

Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet

NERC Staff Scott R Mix

CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet

NERC Staff Michael Moon

Director of Compliance Operations

(404) 446-2560 michaelmoonnercnet

NERC Staff Andrew Rodriquez Director of Standards Development

(404) 446-2560 andyrodriqueznercnet

NERC Staff Peter Knoetgen Director of Training and Accreditation

404-446-9688 peterknoetgennercnet

NERC Staff Herb Schrayshuen

Vice President and Director of Standards

((315) 439-1390 herbschrayshuennercnet

NERC Staff Mark Weatherford

Vice President and Chief Security Officer

(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet

Action Plan

Reliability Issues Coordinated Action Plan June 2011 11

Priority Issue

Lead Committee Subgroup

Proposed Enhancement

Abstract Priority Deliverables Milestones

8

No

n-t

rad

itio

nal

th

reat

s vi

a cy

ber

-se

curi

ty

vuln

erab

iliti

es

Critical Infrastructure Protection Committee

A resilient system fortified by industry planning and operational practices

The continuously evolving threat from cyber-security vulnerabilities requires new processes and procedures both for system planning and operations Industry awareness and cooperation with governmental jurisdictions are key aspects for this improved situational awareness

High

1 Also part of the deliverables in item 7 Preparedness for High Impact Low Frequency events

2 Metric development to measure cyber strength being developed with the Planning Committeersquos Smart Grid Task Force (SGTF)

3 Ongoing industry Alerts as required 4 Guidelines required to advise industry on

the establishment of appropriate cyber-security programs in their organizations

1 Covered in the technical

committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan

2 See Planning Committeersquos Strategic Plan and Action Plan along with the work plan for the SGTF

7

3 See NERCrsquos Alert website8

4 A subgroup formed to develop guidelines reviewing other industryrsquos to take advantage of existing knowledge 2012 Q4

7 httpwwwnerccomfilesSGTF_Report_Final_posted_v11pdf

8 httpwwwnerccompagephpcid=5|63

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

12

AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess

Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the

following list and abstract description was developed

1 Misoperations of relay protection and control systems ndash Nearly all major system failures

excluding perhaps those caused by severe weather have misoperations of relays or

automatic controls as a factor contributing to the propagation of the failure Protection

systems are designed to operate reliably when needed under the presence of a fault on the

system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without

allowing the fault to transfer into adjoining facilities The greater the number of facilities

involved in an event the more severe the impact to the rest of the bulk power system with

cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout

being the extreme Relays can misoperate either operate when not needed or fail to

operate when needed for a number of reasons First the device could experience an

internal failure ndash but this is rare Most commonly relays fail to operate correctly due to

incorrect settings improper coordination (of timing and set points) with other devices

ineffective maintenance and testing or failure of communications channels or power

supplies Preventable errors can be introduced by field personnel and their supervisors or

more programmatically by the organization Adding to the risk is that system protection is

an extremely complex engineering field ndashthere are many practitioners but few masters

2 Human errors by field personnel ndash Field personnel play an important role in the

maintenance and operation of the bulk power system They often are switching equipment

in and out of service and aligning alternative configurations Risks can be introduced when

field personnel operate equipment in a manner that reduces the redundancy of the bulk

power system sometimes even creating single points of failure that would not exist

normally Taking outages of equipment to conduct maintenance is a routine and necessary

part of reliable bulk power system operation However any alterations to the configuration

of the network must be carefully planned in advance to minimize loss of redundancy and

avoid unintended single points of failure It is also important that such changes and risks be

communicated to system operators and reliability coordinators in advance so that they can

make adjustments in their operating plans and reliability assessments

3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system

operators and reliability coordinators are comfortable with informal communications with

field and power plant personnel and neighboring systems Experience from analyzing

various events indicates there is often a sense of awkwardness when personnel transition

from conversational discussion to issuing reliability instructions It is also human nature to

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

13

be uncomfortable in applying formal communication procedures after personnel have

developed informal styles over many years Confusion in making the transition from normal

conversation to formal communications can introduce misunderstandings and possibly even

incorrect actions or assumptions Further once the need to transition to more formal

structure is recognized the transition is often not complete or effective Results can include

unclear instructions confusion whether an instruction is a suggestion or a directive whether

specific action is required or a set of alternative actions are permissible and confusion over

what elements of the system are being addressed

4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation

management programs as a key recommendation for avoiding future cascading failures

More broadly any encroachments in the right-of-way that reduce clearances to the point of

lowering facility ratings or reducing the randomness of possible contacts can be a risk to

reliability Although these impacts may not always be readily apparent under extreme wind

and temperature conditions they may become more of a risk to bulk power system

reliability There are many challenges to effective right-of-way maintenance especially

maintaining proper clearances including interventions by private landowners local

municipalities and federal and state landowners

5 Changing resource mix ndash Energy and environmental policies along with energy markets are

driving proposals toward unprecedented changes in the resource mix of the bulk power

system Examples include integration of significant amounts of renewable (variable such as

wind and solar) natural gas storage and demand resources to provide energy and capacity

Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a

century of operational experience with the existing resource mix However integration of

these new resources results in operating characteristics significantly different from

conventional steam production facilities An array of reliability services must be provided

over a range of time horizons from seconds to minutes to hours and days and annually such

as load following contingency reserves frequency response reactive supply capacity and

voltage control and power system stability Continued reliable operation of the bulk power

system will require an industry dialog with policymakers and regulators Understanding the

impacts on reliability will depend on accurate modeling of new resources and development

of new methods and tools for the provision of essential reliability services

6 Integration of new technologies ndash Introduction of electric vehicles demand-side

management variable generation distributed resources and smart grid technologies

presents tremendous opportunities but also introduces changes to the operating

characteristics of the bulk power system Integration of these new technologies requires

changes in the way the bulk power system is planned and operated to maintain reliability

Further additional toolsmodels are required to support their integration to meet policy and

strategic goals Without these changes it will be challenging to maintain reliability with

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

14

large-scale deployments For example some smart grid devicessystems increase exposure

to cyber threats while variable generation requires additional ancillary services Integration

of these new technologies must be achieved in a manner that does not undermine existing

levels of stability resilience and security of the bulk power system

7 Preparedness for high impact low frequency events ndash Although there is a wide range of

threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for

possible events that could debilitate the bulk power system for extended periods such as

widespread coordinated physicalcyber attacks or geomagnetic storms The industry must

consider improving the design of the bulk power system to address these potential risks and

prepare coordinated North American response plans for use during catastrophic events and

be ready to deploy those plans to restore essential services in a timely manner

8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-

based programs policies and processes to prepare for react to and recover from cyber

security vulnerabilities is a high priority for the industry The bulk power system has not yet

experienced wide-spread cyber-attacks and a contributing factor has been the traditional

physical separation between the industrial control systemSCADA environment and the

business and administrative networks This situation however is rapidly changing

predominantly due to the efficiencies that can be achieved by leveraging shared networks

and resources so now even physically separated environments are susceptible For example

the bulk power system could be as vulnerable to digital threats as IT systems but with far

more critical implications as the recent Stuxnet virus has shown Disabling or turning

systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial

control system software can be changed and data can be stolen without intrusions even

being detected These injection vectors serve as a blueprint for future attackers who wish to

access controllers safety systems and protection devices to insert malicious code targeting

changes to set points and switches as well as alteration or suppression of measurements

Standing Committee Coordination Group Roster

Reliability Issues Coordinated Action Plan

June 2011

15

SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr

Position

Name Title

Company City StateProvince

Phone E-mail

CCC Chair W Clay Smith

2100 East Exchange Place Tucker Georgia 30084-5336

(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom

CCC Vice Chair Terry L Bilke

Director Standards and Compliance

Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202

317 249-5463 317 249-5358 Fax tbilkemidwestisoorg

CCC Vice Chair Brett Hallborg

Manager of Operations Training

BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2

(604) 455-1778 bretthallborgbchydroc

om

CIPC Chair Barry Lawson

Manager Power Delivery

National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203

(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo

p

CIPC Vice Chair Cyber

Charles F Abell PE Supervising Engineer

Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103

(314) 554-3817 (314) 206-0046 Fx cfabellamerencom

CIPC Vice Chair Physical Security

Robert D Canada Business Assurance Principal

Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308

(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom

OC Chair JS Holeman

Director System Operations

Duke Energy

(704) 382-0011 SamHolemanduke-energycom

Action Plan

Reliability Issues Coordinated Action Plan June 2011 16

Position

Name Title

Company City StateProvince

Phone E-mail

OC Vice Chair Tom Bowe

Executive Director of Compliance

PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403

610-666-4776 (610) 666-4287 Fx bowetpjmcom

PC Chair Tom Burgess

Director FERC Compliance

FirstEnergy Corp

330-384-5225 burgesstfirstenergycorpcom

PC Vice Chair Jeffrey L Mitchell

Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333

(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg

PCGC Chair Jacob Burger

Transmission System Control Coordinator

Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832

(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom

SC Chair Allen Mosher

Senior Director of Policy Analysis and Reliability

American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715

(202) 467-2944 (202) 467-2992 Fx amosherappanetorg

SC Vice Chair PS (Ben) Li

President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6

(647) 388-1498 (905) 887-2235 Fx benbenlica

REMG Representative

Edward A Schwerdt President and CEO

Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703

(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg

NERC Staff Roster

Reliability Issues Coordinated Action Plan

June 2011

17

NNEERRCC SSttaaffff RRoosstteerr

Position

Name Title

PhoneE-mail

NERC Staff Alvin J (AJ) Connor

Manager of Power System Analysis (609) 751-2579 ajconnornercnet

NERC Staff Tom Galloway

Senior Vice President and Chief Reliability Officer

(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet

NERC Staff Brian M Harrell

Manager of CIP Standards Training and Awareness

(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet

NERC Staff Larry J Kezele

Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet

NERC Staff Mark G Lauby

Vice President and Director of Reliability Assessment and Performance Analysis

(609) 452-8060 (609) 452-9550 Fax marklaubynercnet

NERC Staff Maureen E Long

Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet

NERC Staff Scott R Mix

CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet

NERC Staff Michael Moon

Director of Compliance Operations

(404) 446-2560 michaelmoonnercnet

NERC Staff Andrew Rodriquez Director of Standards Development

(404) 446-2560 andyrodriqueznercnet

NERC Staff Peter Knoetgen Director of Training and Accreditation

404-446-9688 peterknoetgennercnet

NERC Staff Herb Schrayshuen

Vice President and Director of Standards

((315) 439-1390 herbschrayshuennercnet

NERC Staff Mark Weatherford

Vice President and Chief Security Officer

(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

12

AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess

Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the

following list and abstract description was developed

1 Misoperations of relay protection and control systems ndash Nearly all major system failures

excluding perhaps those caused by severe weather have misoperations of relays or

automatic controls as a factor contributing to the propagation of the failure Protection

systems are designed to operate reliably when needed under the presence of a fault on the

system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without

allowing the fault to transfer into adjoining facilities The greater the number of facilities

involved in an event the more severe the impact to the rest of the bulk power system with

cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout

being the extreme Relays can misoperate either operate when not needed or fail to

operate when needed for a number of reasons First the device could experience an

internal failure ndash but this is rare Most commonly relays fail to operate correctly due to

incorrect settings improper coordination (of timing and set points) with other devices

ineffective maintenance and testing or failure of communications channels or power

supplies Preventable errors can be introduced by field personnel and their supervisors or

more programmatically by the organization Adding to the risk is that system protection is

an extremely complex engineering field ndashthere are many practitioners but few masters

2 Human errors by field personnel ndash Field personnel play an important role in the

maintenance and operation of the bulk power system They often are switching equipment

in and out of service and aligning alternative configurations Risks can be introduced when

field personnel operate equipment in a manner that reduces the redundancy of the bulk

power system sometimes even creating single points of failure that would not exist

normally Taking outages of equipment to conduct maintenance is a routine and necessary

part of reliable bulk power system operation However any alterations to the configuration

of the network must be carefully planned in advance to minimize loss of redundancy and

avoid unintended single points of failure It is also important that such changes and risks be

communicated to system operators and reliability coordinators in advance so that they can

make adjustments in their operating plans and reliability assessments

3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system

operators and reliability coordinators are comfortable with informal communications with

field and power plant personnel and neighboring systems Experience from analyzing

various events indicates there is often a sense of awkwardness when personnel transition

from conversational discussion to issuing reliability instructions It is also human nature to

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

13

be uncomfortable in applying formal communication procedures after personnel have

developed informal styles over many years Confusion in making the transition from normal

conversation to formal communications can introduce misunderstandings and possibly even

incorrect actions or assumptions Further once the need to transition to more formal

structure is recognized the transition is often not complete or effective Results can include

unclear instructions confusion whether an instruction is a suggestion or a directive whether

specific action is required or a set of alternative actions are permissible and confusion over

what elements of the system are being addressed

4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation

management programs as a key recommendation for avoiding future cascading failures

More broadly any encroachments in the right-of-way that reduce clearances to the point of

lowering facility ratings or reducing the randomness of possible contacts can be a risk to

reliability Although these impacts may not always be readily apparent under extreme wind

and temperature conditions they may become more of a risk to bulk power system

reliability There are many challenges to effective right-of-way maintenance especially

maintaining proper clearances including interventions by private landowners local

municipalities and federal and state landowners

5 Changing resource mix ndash Energy and environmental policies along with energy markets are

driving proposals toward unprecedented changes in the resource mix of the bulk power

system Examples include integration of significant amounts of renewable (variable such as

wind and solar) natural gas storage and demand resources to provide energy and capacity

Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a

century of operational experience with the existing resource mix However integration of

these new resources results in operating characteristics significantly different from

conventional steam production facilities An array of reliability services must be provided

over a range of time horizons from seconds to minutes to hours and days and annually such

as load following contingency reserves frequency response reactive supply capacity and

voltage control and power system stability Continued reliable operation of the bulk power

system will require an industry dialog with policymakers and regulators Understanding the

impacts on reliability will depend on accurate modeling of new resources and development

of new methods and tools for the provision of essential reliability services

6 Integration of new technologies ndash Introduction of electric vehicles demand-side

management variable generation distributed resources and smart grid technologies

presents tremendous opportunities but also introduces changes to the operating

characteristics of the bulk power system Integration of these new technologies requires

changes in the way the bulk power system is planned and operated to maintain reliability

Further additional toolsmodels are required to support their integration to meet policy and

strategic goals Without these changes it will be challenging to maintain reliability with

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

14

large-scale deployments For example some smart grid devicessystems increase exposure

to cyber threats while variable generation requires additional ancillary services Integration

of these new technologies must be achieved in a manner that does not undermine existing

levels of stability resilience and security of the bulk power system

7 Preparedness for high impact low frequency events ndash Although there is a wide range of

threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for

possible events that could debilitate the bulk power system for extended periods such as

widespread coordinated physicalcyber attacks or geomagnetic storms The industry must

consider improving the design of the bulk power system to address these potential risks and

prepare coordinated North American response plans for use during catastrophic events and

be ready to deploy those plans to restore essential services in a timely manner

8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-

based programs policies and processes to prepare for react to and recover from cyber

security vulnerabilities is a high priority for the industry The bulk power system has not yet

experienced wide-spread cyber-attacks and a contributing factor has been the traditional

physical separation between the industrial control systemSCADA environment and the

business and administrative networks This situation however is rapidly changing

predominantly due to the efficiencies that can be achieved by leveraging shared networks

and resources so now even physically separated environments are susceptible For example

the bulk power system could be as vulnerable to digital threats as IT systems but with far

more critical implications as the recent Stuxnet virus has shown Disabling or turning

systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial

control system software can be changed and data can be stolen without intrusions even

being detected These injection vectors serve as a blueprint for future attackers who wish to

access controllers safety systems and protection devices to insert malicious code targeting

changes to set points and switches as well as alteration or suppression of measurements

Standing Committee Coordination Group Roster

Reliability Issues Coordinated Action Plan

June 2011

15

SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr

Position

Name Title

Company City StateProvince

Phone E-mail

CCC Chair W Clay Smith

2100 East Exchange Place Tucker Georgia 30084-5336

(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom

CCC Vice Chair Terry L Bilke

Director Standards and Compliance

Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202

317 249-5463 317 249-5358 Fax tbilkemidwestisoorg

CCC Vice Chair Brett Hallborg

Manager of Operations Training

BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2

(604) 455-1778 bretthallborgbchydroc

om

CIPC Chair Barry Lawson

Manager Power Delivery

National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203

(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo

p

CIPC Vice Chair Cyber

Charles F Abell PE Supervising Engineer

Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103

(314) 554-3817 (314) 206-0046 Fx cfabellamerencom

CIPC Vice Chair Physical Security

Robert D Canada Business Assurance Principal

Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308

(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom

OC Chair JS Holeman

Director System Operations

Duke Energy

(704) 382-0011 SamHolemanduke-energycom

Action Plan

Reliability Issues Coordinated Action Plan June 2011 16

Position

Name Title

Company City StateProvince

Phone E-mail

OC Vice Chair Tom Bowe

Executive Director of Compliance

PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403

610-666-4776 (610) 666-4287 Fx bowetpjmcom

PC Chair Tom Burgess

Director FERC Compliance

FirstEnergy Corp

330-384-5225 burgesstfirstenergycorpcom

PC Vice Chair Jeffrey L Mitchell

Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333

(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg

PCGC Chair Jacob Burger

Transmission System Control Coordinator

Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832

(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom

SC Chair Allen Mosher

Senior Director of Policy Analysis and Reliability

American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715

(202) 467-2944 (202) 467-2992 Fx amosherappanetorg

SC Vice Chair PS (Ben) Li

President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6

(647) 388-1498 (905) 887-2235 Fx benbenlica

REMG Representative

Edward A Schwerdt President and CEO

Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703

(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg

NERC Staff Roster

Reliability Issues Coordinated Action Plan

June 2011

17

NNEERRCC SSttaaffff RRoosstteerr

Position

Name Title

PhoneE-mail

NERC Staff Alvin J (AJ) Connor

Manager of Power System Analysis (609) 751-2579 ajconnornercnet

NERC Staff Tom Galloway

Senior Vice President and Chief Reliability Officer

(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet

NERC Staff Brian M Harrell

Manager of CIP Standards Training and Awareness

(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet

NERC Staff Larry J Kezele

Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet

NERC Staff Mark G Lauby

Vice President and Director of Reliability Assessment and Performance Analysis

(609) 452-8060 (609) 452-9550 Fax marklaubynercnet

NERC Staff Maureen E Long

Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet

NERC Staff Scott R Mix

CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet

NERC Staff Michael Moon

Director of Compliance Operations

(404) 446-2560 michaelmoonnercnet

NERC Staff Andrew Rodriquez Director of Standards Development

(404) 446-2560 andyrodriqueznercnet

NERC Staff Peter Knoetgen Director of Training and Accreditation

404-446-9688 peterknoetgennercnet

NERC Staff Herb Schrayshuen

Vice President and Director of Standards

((315) 439-1390 herbschrayshuennercnet

NERC Staff Mark Weatherford

Vice President and Chief Security Officer

(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

13

be uncomfortable in applying formal communication procedures after personnel have

developed informal styles over many years Confusion in making the transition from normal

conversation to formal communications can introduce misunderstandings and possibly even

incorrect actions or assumptions Further once the need to transition to more formal

structure is recognized the transition is often not complete or effective Results can include

unclear instructions confusion whether an instruction is a suggestion or a directive whether

specific action is required or a set of alternative actions are permissible and confusion over

what elements of the system are being addressed

4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation

management programs as a key recommendation for avoiding future cascading failures

More broadly any encroachments in the right-of-way that reduce clearances to the point of

lowering facility ratings or reducing the randomness of possible contacts can be a risk to

reliability Although these impacts may not always be readily apparent under extreme wind

and temperature conditions they may become more of a risk to bulk power system

reliability There are many challenges to effective right-of-way maintenance especially

maintaining proper clearances including interventions by private landowners local

municipalities and federal and state landowners

5 Changing resource mix ndash Energy and environmental policies along with energy markets are

driving proposals toward unprecedented changes in the resource mix of the bulk power

system Examples include integration of significant amounts of renewable (variable such as

wind and solar) natural gas storage and demand resources to provide energy and capacity

Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a

century of operational experience with the existing resource mix However integration of

these new resources results in operating characteristics significantly different from

conventional steam production facilities An array of reliability services must be provided

over a range of time horizons from seconds to minutes to hours and days and annually such

as load following contingency reserves frequency response reactive supply capacity and

voltage control and power system stability Continued reliable operation of the bulk power

system will require an industry dialog with policymakers and regulators Understanding the

impacts on reliability will depend on accurate modeling of new resources and development

of new methods and tools for the provision of essential reliability services

6 Integration of new technologies ndash Introduction of electric vehicles demand-side

management variable generation distributed resources and smart grid technologies

presents tremendous opportunities but also introduces changes to the operating

characteristics of the bulk power system Integration of these new technologies requires

changes in the way the bulk power system is planned and operated to maintain reliability

Further additional toolsmodels are required to support their integration to meet policy and

strategic goals Without these changes it will be challenging to maintain reliability with

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

14

large-scale deployments For example some smart grid devicessystems increase exposure

to cyber threats while variable generation requires additional ancillary services Integration

of these new technologies must be achieved in a manner that does not undermine existing

levels of stability resilience and security of the bulk power system

7 Preparedness for high impact low frequency events ndash Although there is a wide range of

threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for

possible events that could debilitate the bulk power system for extended periods such as

widespread coordinated physicalcyber attacks or geomagnetic storms The industry must

consider improving the design of the bulk power system to address these potential risks and

prepare coordinated North American response plans for use during catastrophic events and

be ready to deploy those plans to restore essential services in a timely manner

8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-

based programs policies and processes to prepare for react to and recover from cyber

security vulnerabilities is a high priority for the industry The bulk power system has not yet

experienced wide-spread cyber-attacks and a contributing factor has been the traditional

physical separation between the industrial control systemSCADA environment and the

business and administrative networks This situation however is rapidly changing

predominantly due to the efficiencies that can be achieved by leveraging shared networks

and resources so now even physically separated environments are susceptible For example

the bulk power system could be as vulnerable to digital threats as IT systems but with far

more critical implications as the recent Stuxnet virus has shown Disabling or turning

systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial

control system software can be changed and data can be stolen without intrusions even

being detected These injection vectors serve as a blueprint for future attackers who wish to

access controllers safety systems and protection devices to insert malicious code targeting

changes to set points and switches as well as alteration or suppression of measurements

Standing Committee Coordination Group Roster

Reliability Issues Coordinated Action Plan

June 2011

15

SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr

Position

Name Title

Company City StateProvince

Phone E-mail

CCC Chair W Clay Smith

2100 East Exchange Place Tucker Georgia 30084-5336

(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom

CCC Vice Chair Terry L Bilke

Director Standards and Compliance

Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202

317 249-5463 317 249-5358 Fax tbilkemidwestisoorg

CCC Vice Chair Brett Hallborg

Manager of Operations Training

BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2

(604) 455-1778 bretthallborgbchydroc

om

CIPC Chair Barry Lawson

Manager Power Delivery

National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203

(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo

p

CIPC Vice Chair Cyber

Charles F Abell PE Supervising Engineer

Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103

(314) 554-3817 (314) 206-0046 Fx cfabellamerencom

CIPC Vice Chair Physical Security

Robert D Canada Business Assurance Principal

Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308

(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom

OC Chair JS Holeman

Director System Operations

Duke Energy

(704) 382-0011 SamHolemanduke-energycom

Action Plan

Reliability Issues Coordinated Action Plan June 2011 16

Position

Name Title

Company City StateProvince

Phone E-mail

OC Vice Chair Tom Bowe

Executive Director of Compliance

PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403

610-666-4776 (610) 666-4287 Fx bowetpjmcom

PC Chair Tom Burgess

Director FERC Compliance

FirstEnergy Corp

330-384-5225 burgesstfirstenergycorpcom

PC Vice Chair Jeffrey L Mitchell

Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333

(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg

PCGC Chair Jacob Burger

Transmission System Control Coordinator

Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832

(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom

SC Chair Allen Mosher

Senior Director of Policy Analysis and Reliability

American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715

(202) 467-2944 (202) 467-2992 Fx amosherappanetorg

SC Vice Chair PS (Ben) Li

President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6

(647) 388-1498 (905) 887-2235 Fx benbenlica

REMG Representative

Edward A Schwerdt President and CEO

Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703

(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg

NERC Staff Roster

Reliability Issues Coordinated Action Plan

June 2011

17

NNEERRCC SSttaaffff RRoosstteerr

Position

Name Title

PhoneE-mail

NERC Staff Alvin J (AJ) Connor

Manager of Power System Analysis (609) 751-2579 ajconnornercnet

NERC Staff Tom Galloway

Senior Vice President and Chief Reliability Officer

(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet

NERC Staff Brian M Harrell

Manager of CIP Standards Training and Awareness

(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet

NERC Staff Larry J Kezele

Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet

NERC Staff Mark G Lauby

Vice President and Director of Reliability Assessment and Performance Analysis

(609) 452-8060 (609) 452-9550 Fax marklaubynercnet

NERC Staff Maureen E Long

Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet

NERC Staff Scott R Mix

CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet

NERC Staff Michael Moon

Director of Compliance Operations

(404) 446-2560 michaelmoonnercnet

NERC Staff Andrew Rodriquez Director of Standards Development

(404) 446-2560 andyrodriqueznercnet

NERC Staff Peter Knoetgen Director of Training and Accreditation

404-446-9688 peterknoetgennercnet

NERC Staff Herb Schrayshuen

Vice President and Director of Standards

((315) 439-1390 herbschrayshuennercnet

NERC Staff Mark Weatherford

Vice President and Chief Security Officer

(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet

Appendix 1 Top Priority Reliability Issues

Reliability Issues Coordinated Action Plan

June 2011

14

large-scale deployments For example some smart grid devicessystems increase exposure

to cyber threats while variable generation requires additional ancillary services Integration

of these new technologies must be achieved in a manner that does not undermine existing

levels of stability resilience and security of the bulk power system

7 Preparedness for high impact low frequency events ndash Although there is a wide range of

threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for

possible events that could debilitate the bulk power system for extended periods such as

widespread coordinated physicalcyber attacks or geomagnetic storms The industry must

consider improving the design of the bulk power system to address these potential risks and

prepare coordinated North American response plans for use during catastrophic events and

be ready to deploy those plans to restore essential services in a timely manner

8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-

based programs policies and processes to prepare for react to and recover from cyber

security vulnerabilities is a high priority for the industry The bulk power system has not yet

experienced wide-spread cyber-attacks and a contributing factor has been the traditional

physical separation between the industrial control systemSCADA environment and the

business and administrative networks This situation however is rapidly changing

predominantly due to the efficiencies that can be achieved by leveraging shared networks

and resources so now even physically separated environments are susceptible For example

the bulk power system could be as vulnerable to digital threats as IT systems but with far

more critical implications as the recent Stuxnet virus has shown Disabling or turning

systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial

control system software can be changed and data can be stolen without intrusions even

being detected These injection vectors serve as a blueprint for future attackers who wish to

access controllers safety systems and protection devices to insert malicious code targeting

changes to set points and switches as well as alteration or suppression of measurements

Standing Committee Coordination Group Roster

Reliability Issues Coordinated Action Plan

June 2011

15

SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr

Position

Name Title

Company City StateProvince

Phone E-mail

CCC Chair W Clay Smith

2100 East Exchange Place Tucker Georgia 30084-5336

(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom

CCC Vice Chair Terry L Bilke

Director Standards and Compliance

Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202

317 249-5463 317 249-5358 Fax tbilkemidwestisoorg

CCC Vice Chair Brett Hallborg

Manager of Operations Training

BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2

(604) 455-1778 bretthallborgbchydroc

om

CIPC Chair Barry Lawson

Manager Power Delivery

National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203

(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo

p

CIPC Vice Chair Cyber

Charles F Abell PE Supervising Engineer

Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103

(314) 554-3817 (314) 206-0046 Fx cfabellamerencom

CIPC Vice Chair Physical Security

Robert D Canada Business Assurance Principal

Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308

(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom

OC Chair JS Holeman

Director System Operations

Duke Energy

(704) 382-0011 SamHolemanduke-energycom

Action Plan

Reliability Issues Coordinated Action Plan June 2011 16

Position

Name Title

Company City StateProvince

Phone E-mail

OC Vice Chair Tom Bowe

Executive Director of Compliance

PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403

610-666-4776 (610) 666-4287 Fx bowetpjmcom

PC Chair Tom Burgess

Director FERC Compliance

FirstEnergy Corp

330-384-5225 burgesstfirstenergycorpcom

PC Vice Chair Jeffrey L Mitchell

Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333

(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg

PCGC Chair Jacob Burger

Transmission System Control Coordinator

Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832

(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom

SC Chair Allen Mosher

Senior Director of Policy Analysis and Reliability

American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715

(202) 467-2944 (202) 467-2992 Fx amosherappanetorg

SC Vice Chair PS (Ben) Li

President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6

(647) 388-1498 (905) 887-2235 Fx benbenlica

REMG Representative

Edward A Schwerdt President and CEO

Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703

(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg

NERC Staff Roster

Reliability Issues Coordinated Action Plan

June 2011

17

NNEERRCC SSttaaffff RRoosstteerr

Position

Name Title

PhoneE-mail

NERC Staff Alvin J (AJ) Connor

Manager of Power System Analysis (609) 751-2579 ajconnornercnet

NERC Staff Tom Galloway

Senior Vice President and Chief Reliability Officer

(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet

NERC Staff Brian M Harrell

Manager of CIP Standards Training and Awareness

(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet

NERC Staff Larry J Kezele

Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet

NERC Staff Mark G Lauby

Vice President and Director of Reliability Assessment and Performance Analysis

(609) 452-8060 (609) 452-9550 Fax marklaubynercnet

NERC Staff Maureen E Long

Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet

NERC Staff Scott R Mix

CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet

NERC Staff Michael Moon

Director of Compliance Operations

(404) 446-2560 michaelmoonnercnet

NERC Staff Andrew Rodriquez Director of Standards Development

(404) 446-2560 andyrodriqueznercnet

NERC Staff Peter Knoetgen Director of Training and Accreditation

404-446-9688 peterknoetgennercnet

NERC Staff Herb Schrayshuen

Vice President and Director of Standards

((315) 439-1390 herbschrayshuennercnet

NERC Staff Mark Weatherford

Vice President and Chief Security Officer

(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet

Standing Committee Coordination Group Roster

Reliability Issues Coordinated Action Plan

June 2011

15

SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr

Position

Name Title

Company City StateProvince

Phone E-mail

CCC Chair W Clay Smith

2100 East Exchange Place Tucker Georgia 30084-5336

(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom

CCC Vice Chair Terry L Bilke

Director Standards and Compliance

Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202

317 249-5463 317 249-5358 Fax tbilkemidwestisoorg

CCC Vice Chair Brett Hallborg

Manager of Operations Training

BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2

(604) 455-1778 bretthallborgbchydroc

om

CIPC Chair Barry Lawson

Manager Power Delivery

National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203

(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo

p

CIPC Vice Chair Cyber

Charles F Abell PE Supervising Engineer

Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103

(314) 554-3817 (314) 206-0046 Fx cfabellamerencom

CIPC Vice Chair Physical Security

Robert D Canada Business Assurance Principal

Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308

(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom

OC Chair JS Holeman

Director System Operations

Duke Energy

(704) 382-0011 SamHolemanduke-energycom

Action Plan

Reliability Issues Coordinated Action Plan June 2011 16

Position

Name Title

Company City StateProvince

Phone E-mail

OC Vice Chair Tom Bowe

Executive Director of Compliance

PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403

610-666-4776 (610) 666-4287 Fx bowetpjmcom

PC Chair Tom Burgess

Director FERC Compliance

FirstEnergy Corp

330-384-5225 burgesstfirstenergycorpcom

PC Vice Chair Jeffrey L Mitchell

Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333

(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg

PCGC Chair Jacob Burger

Transmission System Control Coordinator

Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832

(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom

SC Chair Allen Mosher

Senior Director of Policy Analysis and Reliability

American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715

(202) 467-2944 (202) 467-2992 Fx amosherappanetorg

SC Vice Chair PS (Ben) Li

President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6

(647) 388-1498 (905) 887-2235 Fx benbenlica

REMG Representative

Edward A Schwerdt President and CEO

Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703

(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg

NERC Staff Roster

Reliability Issues Coordinated Action Plan

June 2011

17

NNEERRCC SSttaaffff RRoosstteerr

Position

Name Title

PhoneE-mail

NERC Staff Alvin J (AJ) Connor

Manager of Power System Analysis (609) 751-2579 ajconnornercnet

NERC Staff Tom Galloway

Senior Vice President and Chief Reliability Officer

(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet

NERC Staff Brian M Harrell

Manager of CIP Standards Training and Awareness

(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet

NERC Staff Larry J Kezele

Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet

NERC Staff Mark G Lauby

Vice President and Director of Reliability Assessment and Performance Analysis

(609) 452-8060 (609) 452-9550 Fax marklaubynercnet

NERC Staff Maureen E Long

Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet

NERC Staff Scott R Mix

CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet

NERC Staff Michael Moon

Director of Compliance Operations

(404) 446-2560 michaelmoonnercnet

NERC Staff Andrew Rodriquez Director of Standards Development

(404) 446-2560 andyrodriqueznercnet

NERC Staff Peter Knoetgen Director of Training and Accreditation

404-446-9688 peterknoetgennercnet

NERC Staff Herb Schrayshuen

Vice President and Director of Standards

((315) 439-1390 herbschrayshuennercnet

NERC Staff Mark Weatherford

Vice President and Chief Security Officer

(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet

Action Plan

Reliability Issues Coordinated Action Plan June 2011 16

Position

Name Title

Company City StateProvince

Phone E-mail

OC Vice Chair Tom Bowe

Executive Director of Compliance

PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403

610-666-4776 (610) 666-4287 Fx bowetpjmcom

PC Chair Tom Burgess

Director FERC Compliance

FirstEnergy Corp

330-384-5225 burgesstfirstenergycorpcom

PC Vice Chair Jeffrey L Mitchell

Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333

(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg

PCGC Chair Jacob Burger

Transmission System Control Coordinator

Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832

(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom

SC Chair Allen Mosher

Senior Director of Policy Analysis and Reliability

American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715

(202) 467-2944 (202) 467-2992 Fx amosherappanetorg

SC Vice Chair PS (Ben) Li

President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6

(647) 388-1498 (905) 887-2235 Fx benbenlica

REMG Representative

Edward A Schwerdt President and CEO

Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703

(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg

NERC Staff Roster

Reliability Issues Coordinated Action Plan

June 2011

17

NNEERRCC SSttaaffff RRoosstteerr

Position

Name Title

PhoneE-mail

NERC Staff Alvin J (AJ) Connor

Manager of Power System Analysis (609) 751-2579 ajconnornercnet

NERC Staff Tom Galloway

Senior Vice President and Chief Reliability Officer

(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet

NERC Staff Brian M Harrell

Manager of CIP Standards Training and Awareness

(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet

NERC Staff Larry J Kezele

Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet

NERC Staff Mark G Lauby

Vice President and Director of Reliability Assessment and Performance Analysis

(609) 452-8060 (609) 452-9550 Fax marklaubynercnet

NERC Staff Maureen E Long

Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet

NERC Staff Scott R Mix

CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet

NERC Staff Michael Moon

Director of Compliance Operations

(404) 446-2560 michaelmoonnercnet

NERC Staff Andrew Rodriquez Director of Standards Development

(404) 446-2560 andyrodriqueznercnet

NERC Staff Peter Knoetgen Director of Training and Accreditation

404-446-9688 peterknoetgennercnet

NERC Staff Herb Schrayshuen

Vice President and Director of Standards

((315) 439-1390 herbschrayshuennercnet

NERC Staff Mark Weatherford

Vice President and Chief Security Officer

(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet

NERC Staff Roster

Reliability Issues Coordinated Action Plan

June 2011

17

NNEERRCC SSttaaffff RRoosstteerr

Position

Name Title

PhoneE-mail

NERC Staff Alvin J (AJ) Connor

Manager of Power System Analysis (609) 751-2579 ajconnornercnet

NERC Staff Tom Galloway

Senior Vice President and Chief Reliability Officer

(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet

NERC Staff Brian M Harrell

Manager of CIP Standards Training and Awareness

(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet

NERC Staff Larry J Kezele

Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet

NERC Staff Mark G Lauby

Vice President and Director of Reliability Assessment and Performance Analysis

(609) 452-8060 (609) 452-9550 Fax marklaubynercnet

NERC Staff Maureen E Long

Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet

NERC Staff Scott R Mix

CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet

NERC Staff Michael Moon

Director of Compliance Operations

(404) 446-2560 michaelmoonnercnet

NERC Staff Andrew Rodriquez Director of Standards Development

(404) 446-2560 andyrodriqueznercnet

NERC Staff Peter Knoetgen Director of Training and Accreditation

404-446-9688 peterknoetgennercnet

NERC Staff Herb Schrayshuen

Vice President and Director of Standards

((315) 439-1390 herbschrayshuennercnet

NERC Staff Mark Weatherford

Vice President and Chief Security Officer

(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet