nerc president’s top priority issues for bulk power … committees coordination...reviewed the...
TRANSCRIPT
SSttaannddiinngg CCoommmmiitttteeee RReelliiaabbiilliittyy IIssssuueess CCoooorrddiinnaatteedd AAccttiioonn PPllaann
NERC Presidentrsquos Top Priority Issues for Bulk Power System Reliability
Draft
June 2011
Table of Contents
Reliability Issues Coordinated Action Plan June 2011 i
TTaabbllee ooff CCoonntteennttss
Introduction 1
Background 1 Top Priority Reliability Issues 1 Roles ndash Reliability Issues Coordinated Action Plan 2 Next Steps 3
Organization 4
Action Plan 7
Appendix 1 Top Priority Reliability Issues 12
Standing Committee Coordination Group Roster 15
NERC Staff Roster 17
Introduction
Reliability Issues Coordinated Action Plan June 2011 1
IInnttrroodduuccttiioonn
Background
On January 7 2011 NERC announced a preliminary set of high priority reliability issues
intended to focus ERO program areas including standards setting compliance and training and
education1 Subsequent to this posting NERCrsquos technical and standing committees have
reviewed the identified elements provided suggestions and enhancements and have agreed to
work with stakeholders in accepting accountability for implementing an action plan addressing
these reliability issues This document provides an action plan towards addressing these
reliability issues including priorities and milestones
Top Priority Reliability Issues
The priority list is based partially on experience from reviewing actual system events (topics 1
to 4) and forward looking issues (topics 5 to 8) Though the reliability issues were offered as a
starting point for discussion with industry experts the standing committees believed them
important enough to develop this action plan In the next few years it is expected that new
reliability performance measures and root cause analysis methods being initiated by NERC will
further reinforce the setting of reliability priorities The goal is to develop a list of priorities to
focus work in the one to three year horizon on those areas most likely to have a positive impact
on bulk power system reliability The following high level list addresses technical issues and
does not enumerate policy matters that should be dealt with in alternative governance and
regulatory forums (See Appendix 1 for complete description)
1 Misoperations of relay protection and control systems
2 Human errors by field personnel
3 Ambiguous or incomplete voice communications
4 Right-of-way maintenance
5 Changing resource mix
6 Integration of new technologies
7 Preparedness for high impact low frequency events
8 Non-traditional threats via cyber security vulnerabilities
1 NERC Presidentrsquos Top Priority Issues for Bulk Power System Reliability httpwwwnerccomnews_prphpnpr=723 at httpwwwnerccomfileUploadsFileNewsNERC20President20Top20Priority20BPS20Reliability20Issues201-7-11pdf
Introduction
Reliability Issues Coordinated Action Plan June 2011 2
Roles ndash Reliability Issues Coordinated Action Plan
Since these reliability issues can functionally cross multiple committees coordination is
essential to the successful implementation of the Reliability Issues Coordinated Action Plan The
standing committees and NERC Staff have formulated a coordinated approach to ensure
effectiveness in implementation Figure 1 below provides the roles coordination points and
responsibilities of this coordination effort to support this Reliability Issues Coordinated Action
Plan
Figure 1 Roles ndash Reliability Issues Coordinated Action Plan
Introduction
Reliability Issues Coordinated Action Plan June 2011 3
Next Steps
Once lead standing committees are identified for each of the reliability issues and through
their usual processes they will then direct the appropriate sub-groups review and refine their
respective scopes and consider the needed resources deliverables and milestones In many
instances a subgroup is already in place working on one or more of these reliability issues If
no appropriate subgroup exists the standing committees will develop a draft scope and form a
subgroup to address the reliability issue Figure 2 below describes the work plan development
and implementation process
Figure 2 Work Plan Development and Implementation Process
Lead Standing Committee Identified
Develop Action Plan seek approval from Standing Committees and BOT
Direct appropriate Subgroup to Address Reliability Issue
Deliver on Milestones in Plan
Organization
Reliability Issues Coordinated Action Plan June 2011 4
OOrrggaanniizzaattiioonn
The Electric Reliability Organization (ERO) Strategic Goals through 2015 are summarized in the following key goals2
Goal 1 The ERO will have clear results-based reliability standards that provide for an
adequate level of bulk power system reliability
Goal 2 Bulk power system owners operators and users will demonstrate sustained
cultures of learning and reliability excellence built upon underlying foundations
of compliance and effective risk management and mitigation
Goal 3 The ERO will develop and maintain effective reliability performance measures
and will continue to develop high quality reliability assessments based on long
range and seasonal forecasts as well as emerging issues
Goal 4 Bulk power system owners operators and users will effectively manage risks
from cyber and physical attacks and other high-impact low-frequency events
Goal 5 The ERO will balance the role of being a strong independent enforcement
authority with one of providing owners operators and users timely and
transparent feedback on compliance and effective incentives for improving
reliability
Goal 6 NERC and the regional entities will execute statutory functions in a collaborative
enterprise and thereby achieve efficiencies and effective process controls while
leveraging the expertise of staff and reliability stakeholder resources
Goal 7 The ERO will maintain an exceptional reputation as the trusted leader of the
reliability community and instill a high degree of confidence in the reliability of
the bulk power system
Based on NERCrsquos Strategic Plan and the top priority Issues for bulk power system
reliability the standing committeersquos leadership and NERC staff have assigned lead
committees for each reliability issue and formulated deliverables priorities and
milestones (see Table 1)
2 February 17 2011 Board of Trustees agenda item 7 Electric Reliability Organization Strategic Goals through 2015 httpwwwnerccomdocsdocsbotBOT-0211a-completepdf
Organization
Reliability Issues Coordinated Action Plan June 2011 5
Table 1 Proposed LeadSupport NERC Staff and Standing Committees
Top Priority Issues
NERC Lead
Standing Committee Lead NERC Support
Standing Committee Support
1 M
iso
pe
rati
on
s o
f re
lay
pro
tect
ion
and
co
ntr
ol s
yste
ms
Long
Rodriquez
Connor
Cummings
Bian
Standards Committee
Standard Drafting Teams (SDTs) o Protection System Maintenance o Coordination of Protection
Systems o Generator Verification o Protection System
Misoperations
Planning Committee
System Protection amp Control Subcommittee
Reliability Metrics Working Group
Kezele
Moon
Operating Committee
Compliance and Certification Committee
2 H
um
an e
rro
rs b
y
fie
ld p
ers
on
ne
l
Galloway
Kezele
Operating Committee
Personnel Subcommittee
Long Rodriquez
Connor
Moon
Standards Committee
Reliability Coordination SDT
Operations Communications Protocols SDT
Planning Committee
Compliance and Certification Committee
3 A
mb
igu
ou
s o
r
inco
mp
lete
vo
ice
com
mu
nic
atio
n Galloway
Kezele
Operating Committee
Long Rodriquez
Connor
Moon
Standards Committee
Reliability Coordination SDT
Operations Communications Protocols SDT
Planning Committee
Compliance and Certification Committee
4 R
igh
t-o
f-w
ay
mai
nte
nan
ce Kezele
Carter Operating Committee Connor
Moon
Long Rodriquez
Planning Committee
Compliance and Certification Committee
Standards Committee
Vegetation Management SDT
5 C
han
gin
g
reso
urc
e m
ix
Connor Moura Moura
Moura
Planning Committee
Reliability Assessment Subcommittee
Integration of Variable Generation Task Force
Smart Grid Task Force
Kezele
Moon
Connor Moura
Bian Moura
Operating Committee
Compliance and Certification Committee
Planning Committee
Demand Response Data Task Force
TADSGADS
Smart Grid Task Force
Organization
Reliability Issues Coordinated Action Plan June 2011 6
Top Priority Issues
NERC Lead
Standing Committee Lead NERC Support
Standing Committee Support
6 I
nte
grat
ion
of
ne
w
tech
no
logi
es
Connor Moura Moura
Planning Committee
Smart Grid Task Force
Reliability Assessment Subcommittee
Mix
Moon
Kezele
Critical Infrastructure Protection Committee
Compliance and Certification Committee
Operating Committee
7 P
rep
are
dn
ess
fo
r h
igh
imp
act
low
fre
qu
en
cy e
ven
ts
Connor Bian
Moura
Kezele Kezele
Mix
Roxey
Planning Committee
Spare Equipment Database Task Force
Geomagnetic Disturbance Task Force
Operating Committee
Severe Impact Resilience Task Force
Critical Infrastructure Protection Committee
Cyber Attack Task Force
Moon Compliance and Certification Committee
8 N
on
-tra
dit
ion
al
thre
ats
via
cyb
er-
secu
rity
vuln
era
bili
tie
s
Mix Critical Infrastructure Protection Committee
Connor Moura
Kezele
Moon
Planning Committee
Smart Grid Task Force
Operating Committee
Compliance and Certification Committee
Action Plan
Reliability Issues Coordinated Action Plan
June 2011
7
AAccttiioonn PPllaann
The following Action Plan (Table 2) provides Proposed Enhancements Abstract of activity priorities key deliverables and projected milestones
Table 2 Reliability Issues Action Plan
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
1
Mis
op
erat
ion
s o
f re
lay
pro
tect
ion
an
d c
on
tro
l sys
tem
s
Standards Committee
NERC Reliability Standards
Prepare and achieve approval Reliability Standards that minimize relay control system misoperations
High 1 PRC-005 Protection System
Maintenance 2 PRC-004 Protection System Misoperation
Identification and Correction (Rapid Development Pilot)
3 PRC-024 Generator Performance During Frequency and Voltage Excursions
4 PRC-019 Coordination of Generator Voltage Regulator Controls with Unit Capabilities and Protection
5 PRC-001 Protection System Coordination
1 BOT eta Q3 2011 2 BOT eta Q2 2012 3 BOT eta Q2 2012
4 BOT eta Q4 2012
5 BOT eta Q1 2013
Planning Committee System Protection amp Control Subcommittee
Reliability Metrics Working Group
Provide tools for improvement and measure trends
Enhancing the available tools to planners and operators and measuring trends will support industry efforts to improve
High
1 Guidance for relay maintenance and adequacy of protection engineering
2 Metrics that measure relaycontrol system misoperation
1 SPCS deliver Guide Q2 2012
2 RMWG develops metrics Q4 2011 TADSWG collects data as needed
Low 3 Address ways to enhance operator trainingrelay knowledge
3 SPCS in collaboration with the OCrsquos Personnel Subcommittee deliver tutorial for OC review Q4 2013
2
Hu
man
er
rors
by
fiel
d
per
son
nel
Operating Committee Personnel Subcommittee
Developing root causes lessons learned and guidance on processes can shape industry improvement opportunities
Enhancing industry knowledge of failure modes can improve reliability Standard development on operator training can help ensure successful implementation of recommendations
High 1 Develop guidance for root cause aspects
ndash including planningmanagement decisions
2 Develop refined cause codes to capture root cause
3 Develop processes that lead to quicker sharing of lessons learned
4 Develop guidance on tools development (man‐machine interfacedesign)
1 EAWG develop root cause guidebook by Q4 2012
2 EAWG to develop cause codes by Q4 2013
3 EAWG to streamline lessons learned process by Q4 2011
4 RCWG to create tools development guidebook Q4 2014
Action Plan
Reliability Issues Coordinated Action Plan June 2011 8
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
Medium 5 Develop process guidance for task design
(process resolutions plan the work and work the plan)
6 Support Personnel Training Standard
5 Personnel Subcommittee to prioritize and develop task design guidance Q3 2012
6 Personnel Subcommittee to develop SAR by Q4 2012
3
Am
big
uo
us
or
inco
mp
lete
vo
ice
com
mu
nic
atio
n
Standards Committee NERC Reliability Standards
Prepare and approve Reliability Standards that address communications
High 1 COM-002-3 ndash Communications and
Coordination Standard 2 COM-003-1 ndash Operating Personnel
Communications Protocols Standard
1 BOT eta Q1 2012
2 BOT eta Q4 2012
Operating Committee
Measurably improved communications in system operations
Provide guidance clarifying for operators the role of communications in improvement of reliability Should be a subset of 2 (good practices training deliverables etc)
Medium 1 Use other industries for guidance 2 Provide guidance on the benefits of using
of standard operating language or good practices separate from three-part communications Clarify for operators when communications are mission critical and when prescriptive forms impede reliability
3 Provide clear interpretations of the relevant reliability standards so that there is certainty for directives and associated communication actions
1 RCWG investigates and documents other industryrsquos experience and use of communications Report Q4 2012
2 RCWG develops guidelines on benefits from standard communication approaches Detail the use of communications to improve while not reducing reliability Q3 2013
3 Operating Committee works with NERCrsquos Compliance Operations on Compliance Application Notices (CAN) to eliminate ambiguous terms used in operations Q2 2012
4
Rig
ht-
of-
way
m
ain
ten
ance
Operating Committee (Primary Technical Committee ndash not determined)
Measurably improved right-of-way maintenance
Ensure that ROW maintenance practices result incompliance with FAC-003-2 requirements thereby maintaining reliability
High 1 Document actions undertaken that
address the facility ratings Alert results Leverage the North American Transmission Forum work for planning calculationsratings
2 Provide guidance for operational coordination among operating units TOPs RCs and BAs for different situations
1 Subgroup formed in collaboration with NERC and the Regional Entities along with the North American Transmission forum to document the result of the FAC-003-2 plans to develop industry guidance and action Q4 2011
2 Subgroup should develop guidelines for coordination among TOPs RCs and BAs Q4 2012
Action Plan
Reliability Issues Coordinated Action Plan June 2011 9
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
Standards Committee NERC Reliability Standards
Prepare and achieve approval of Reliability Standard for Transmission Vegetation Management
Low 1 FAC-003-2 ndash Transmission Vegetation
Management 1 BOT eta Q3 2011
5
Ch
angi
ng
reso
urc
e m
ix
Planning Committee
Reliability Assessment Subcommittee
Integration of Variable Generation Task Force
Smart Grid Task Force
Ready industry for the changing resource mix and technology integration by providing guidance and input into NERCrsquos Reliability Standards
Unprecedented change in resource mix being realized through retirement of aging units capital fuel costs along with environmental regulations This change along with technological advances in communications and control can change the well understood character of the bulk power system requiring changes in the planning approaches to ensure operational reliability
Medium 1 IVGTF ndash addressing frequency voltage
response resource flexibility contingency reserves
2 SGTF ndash addressing reliability impacts 3 RIS-RAS - addressing scenarios resource
mix planning probabilistic assessments 4 Scenarios that address resource mix
implications such as natural gas interdependence
5 Evaluate benefit of probabilistic metrics and provide guidance to plannersoperators
6 Develop targetsmetricsrefinements for planningoperation
7 Provide guidance on tools for operators 8 Develop potential standards proposals
or guidanceadvisories that enhance reliability
9 Provide recommendations for expanded planning assessments to address resource mix changes
1 through 13 See Planning Committeersquos Strategic Plan
3
and Action Plan4
3 through 6 Resource Issues and Reliability Assessment Subcommittees
Annual Summer Reliability Assessment
Annual Winter Reliability Assessment
Annual Long-Term Reliability Assessment o Scenarios o Emerging Issues o Probabilistic
3 httpwwwnerccomdocspcAgendaItem_5a_PC_2011-2016_Strategic_Plan_v5_LINKpdf
4 httpwwwnerccomdocspcAgendaItem_5ai_PC_Strategic_Plan_Next20Steps2020Future20Work20Plan_v5_LINKpdf
Action Plan
Reliability Issues Coordinated Action Plan June 2011 10
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
6
Inte
grat
ion
of
new
te
chn
olo
gies
Planning Committee
Smart Grid Task Force
Reliability Assessment Subcommittee
10 Smart Grid impacts from distribution
systems (Address cyber aspects in 8 Non-Traditional Threats via Cyber-Security Vulnerabilities)
11 IVGTF dealing with distribution (renewables EV and conventional) resource integration
12 DRDTF addressing high levels of demand response integration
13 TIS and SPCS will provide guidance for modeling and controls systems managementcoordination
Assessment
7
Pre
par
edn
ess
for
hig
h
imp
act
low
fre
qu
ency
ev
ents
Planning Committee
Spare Equipment Database Task Force
Geomagnetic Disturbance Task Force
Operating Committee
Severe Impact Resilience Task Force
Critical Infrastructure Protection Committee
Cyber Attack Task Force
Address the risks from selected high impact low frequency events which can have unacceptable consequences on bulk power system reliability
The bulk power system has significant amounts of built-in resiliency However it has been planned and operated with the known risks to successfully manage system performance With changing threats from cyber physical and new facts about GMD industry will adjust their planning and operational activities to address these evolving risks
High 1 The Electricity Subsector Coordinating
Council has developed a BOT approved Critical Infrastructure Strategic Roadmap
5 in Q4 2010
2 The technical Committees have developed a Critical Infrastructure Strategic Initiatives Coordinated Action Plan
6 BOT approved in Q4 2010
1-2 Covered in the technical committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan
5 httpwwwnerccomdocsesccESCC_Critical_Infrastructure_Strategic_Roadmappdf
6 httpwwwnerccomdocsciscapCritical_Infrastructure_Strategic_Initiatives_Coordinated_Action_Plan_BOT_Apprd_11-2010pdf
Action Plan
Reliability Issues Coordinated Action Plan June 2011 11
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
8
No
n-t
rad
itio
nal
th
reat
s vi
a cy
ber
-se
curi
ty
vuln
erab
iliti
es
Critical Infrastructure Protection Committee
A resilient system fortified by industry planning and operational practices
The continuously evolving threat from cyber-security vulnerabilities requires new processes and procedures both for system planning and operations Industry awareness and cooperation with governmental jurisdictions are key aspects for this improved situational awareness
High
1 Also part of the deliverables in item 7 Preparedness for High Impact Low Frequency events
2 Metric development to measure cyber strength being developed with the Planning Committeersquos Smart Grid Task Force (SGTF)
3 Ongoing industry Alerts as required 4 Guidelines required to advise industry on
the establishment of appropriate cyber-security programs in their organizations
1 Covered in the technical
committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan
2 See Planning Committeersquos Strategic Plan and Action Plan along with the work plan for the SGTF
7
3 See NERCrsquos Alert website8
4 A subgroup formed to develop guidelines reviewing other industryrsquos to take advantage of existing knowledge 2012 Q4
7 httpwwwnerccomfilesSGTF_Report_Final_posted_v11pdf
8 httpwwwnerccompagephpcid=5|63
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
12
AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess
Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the
following list and abstract description was developed
1 Misoperations of relay protection and control systems ndash Nearly all major system failures
excluding perhaps those caused by severe weather have misoperations of relays or
automatic controls as a factor contributing to the propagation of the failure Protection
systems are designed to operate reliably when needed under the presence of a fault on the
system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without
allowing the fault to transfer into adjoining facilities The greater the number of facilities
involved in an event the more severe the impact to the rest of the bulk power system with
cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout
being the extreme Relays can misoperate either operate when not needed or fail to
operate when needed for a number of reasons First the device could experience an
internal failure ndash but this is rare Most commonly relays fail to operate correctly due to
incorrect settings improper coordination (of timing and set points) with other devices
ineffective maintenance and testing or failure of communications channels or power
supplies Preventable errors can be introduced by field personnel and their supervisors or
more programmatically by the organization Adding to the risk is that system protection is
an extremely complex engineering field ndashthere are many practitioners but few masters
2 Human errors by field personnel ndash Field personnel play an important role in the
maintenance and operation of the bulk power system They often are switching equipment
in and out of service and aligning alternative configurations Risks can be introduced when
field personnel operate equipment in a manner that reduces the redundancy of the bulk
power system sometimes even creating single points of failure that would not exist
normally Taking outages of equipment to conduct maintenance is a routine and necessary
part of reliable bulk power system operation However any alterations to the configuration
of the network must be carefully planned in advance to minimize loss of redundancy and
avoid unintended single points of failure It is also important that such changes and risks be
communicated to system operators and reliability coordinators in advance so that they can
make adjustments in their operating plans and reliability assessments
3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system
operators and reliability coordinators are comfortable with informal communications with
field and power plant personnel and neighboring systems Experience from analyzing
various events indicates there is often a sense of awkwardness when personnel transition
from conversational discussion to issuing reliability instructions It is also human nature to
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
13
be uncomfortable in applying formal communication procedures after personnel have
developed informal styles over many years Confusion in making the transition from normal
conversation to formal communications can introduce misunderstandings and possibly even
incorrect actions or assumptions Further once the need to transition to more formal
structure is recognized the transition is often not complete or effective Results can include
unclear instructions confusion whether an instruction is a suggestion or a directive whether
specific action is required or a set of alternative actions are permissible and confusion over
what elements of the system are being addressed
4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation
management programs as a key recommendation for avoiding future cascading failures
More broadly any encroachments in the right-of-way that reduce clearances to the point of
lowering facility ratings or reducing the randomness of possible contacts can be a risk to
reliability Although these impacts may not always be readily apparent under extreme wind
and temperature conditions they may become more of a risk to bulk power system
reliability There are many challenges to effective right-of-way maintenance especially
maintaining proper clearances including interventions by private landowners local
municipalities and federal and state landowners
5 Changing resource mix ndash Energy and environmental policies along with energy markets are
driving proposals toward unprecedented changes in the resource mix of the bulk power
system Examples include integration of significant amounts of renewable (variable such as
wind and solar) natural gas storage and demand resources to provide energy and capacity
Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a
century of operational experience with the existing resource mix However integration of
these new resources results in operating characteristics significantly different from
conventional steam production facilities An array of reliability services must be provided
over a range of time horizons from seconds to minutes to hours and days and annually such
as load following contingency reserves frequency response reactive supply capacity and
voltage control and power system stability Continued reliable operation of the bulk power
system will require an industry dialog with policymakers and regulators Understanding the
impacts on reliability will depend on accurate modeling of new resources and development
of new methods and tools for the provision of essential reliability services
6 Integration of new technologies ndash Introduction of electric vehicles demand-side
management variable generation distributed resources and smart grid technologies
presents tremendous opportunities but also introduces changes to the operating
characteristics of the bulk power system Integration of these new technologies requires
changes in the way the bulk power system is planned and operated to maintain reliability
Further additional toolsmodels are required to support their integration to meet policy and
strategic goals Without these changes it will be challenging to maintain reliability with
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
14
large-scale deployments For example some smart grid devicessystems increase exposure
to cyber threats while variable generation requires additional ancillary services Integration
of these new technologies must be achieved in a manner that does not undermine existing
levels of stability resilience and security of the bulk power system
7 Preparedness for high impact low frequency events ndash Although there is a wide range of
threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for
possible events that could debilitate the bulk power system for extended periods such as
widespread coordinated physicalcyber attacks or geomagnetic storms The industry must
consider improving the design of the bulk power system to address these potential risks and
prepare coordinated North American response plans for use during catastrophic events and
be ready to deploy those plans to restore essential services in a timely manner
8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-
based programs policies and processes to prepare for react to and recover from cyber
security vulnerabilities is a high priority for the industry The bulk power system has not yet
experienced wide-spread cyber-attacks and a contributing factor has been the traditional
physical separation between the industrial control systemSCADA environment and the
business and administrative networks This situation however is rapidly changing
predominantly due to the efficiencies that can be achieved by leveraging shared networks
and resources so now even physically separated environments are susceptible For example
the bulk power system could be as vulnerable to digital threats as IT systems but with far
more critical implications as the recent Stuxnet virus has shown Disabling or turning
systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial
control system software can be changed and data can be stolen without intrusions even
being detected These injection vectors serve as a blueprint for future attackers who wish to
access controllers safety systems and protection devices to insert malicious code targeting
changes to set points and switches as well as alteration or suppression of measurements
Standing Committee Coordination Group Roster
Reliability Issues Coordinated Action Plan
June 2011
15
SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr
Position
Name Title
Company City StateProvince
Phone E-mail
CCC Chair W Clay Smith
2100 East Exchange Place Tucker Georgia 30084-5336
(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom
CCC Vice Chair Terry L Bilke
Director Standards and Compliance
Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202
317 249-5463 317 249-5358 Fax tbilkemidwestisoorg
CCC Vice Chair Brett Hallborg
Manager of Operations Training
BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2
(604) 455-1778 bretthallborgbchydroc
om
CIPC Chair Barry Lawson
Manager Power Delivery
National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203
(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo
p
CIPC Vice Chair Cyber
Charles F Abell PE Supervising Engineer
Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103
(314) 554-3817 (314) 206-0046 Fx cfabellamerencom
CIPC Vice Chair Physical Security
Robert D Canada Business Assurance Principal
Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308
(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom
OC Chair JS Holeman
Director System Operations
Duke Energy
(704) 382-0011 SamHolemanduke-energycom
Action Plan
Reliability Issues Coordinated Action Plan June 2011 16
Position
Name Title
Company City StateProvince
Phone E-mail
OC Vice Chair Tom Bowe
Executive Director of Compliance
PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403
610-666-4776 (610) 666-4287 Fx bowetpjmcom
PC Chair Tom Burgess
Director FERC Compliance
FirstEnergy Corp
330-384-5225 burgesstfirstenergycorpcom
PC Vice Chair Jeffrey L Mitchell
Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333
(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg
PCGC Chair Jacob Burger
Transmission System Control Coordinator
Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832
(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom
SC Chair Allen Mosher
Senior Director of Policy Analysis and Reliability
American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715
(202) 467-2944 (202) 467-2992 Fx amosherappanetorg
SC Vice Chair PS (Ben) Li
President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6
(647) 388-1498 (905) 887-2235 Fx benbenlica
REMG Representative
Edward A Schwerdt President and CEO
Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703
(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg
NERC Staff Roster
Reliability Issues Coordinated Action Plan
June 2011
17
NNEERRCC SSttaaffff RRoosstteerr
Position
Name Title
PhoneE-mail
NERC Staff Alvin J (AJ) Connor
Manager of Power System Analysis (609) 751-2579 ajconnornercnet
NERC Staff Tom Galloway
Senior Vice President and Chief Reliability Officer
(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet
NERC Staff Brian M Harrell
Manager of CIP Standards Training and Awareness
(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet
NERC Staff Larry J Kezele
Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet
NERC Staff Mark G Lauby
Vice President and Director of Reliability Assessment and Performance Analysis
(609) 452-8060 (609) 452-9550 Fax marklaubynercnet
NERC Staff Maureen E Long
Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet
NERC Staff Scott R Mix
CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet
NERC Staff Michael Moon
Director of Compliance Operations
(404) 446-2560 michaelmoonnercnet
NERC Staff Andrew Rodriquez Director of Standards Development
(404) 446-2560 andyrodriqueznercnet
NERC Staff Peter Knoetgen Director of Training and Accreditation
404-446-9688 peterknoetgennercnet
NERC Staff Herb Schrayshuen
Vice President and Director of Standards
((315) 439-1390 herbschrayshuennercnet
NERC Staff Mark Weatherford
Vice President and Chief Security Officer
(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet
Table of Contents
Reliability Issues Coordinated Action Plan June 2011 i
TTaabbllee ooff CCoonntteennttss
Introduction 1
Background 1 Top Priority Reliability Issues 1 Roles ndash Reliability Issues Coordinated Action Plan 2 Next Steps 3
Organization 4
Action Plan 7
Appendix 1 Top Priority Reliability Issues 12
Standing Committee Coordination Group Roster 15
NERC Staff Roster 17
Introduction
Reliability Issues Coordinated Action Plan June 2011 1
IInnttrroodduuccttiioonn
Background
On January 7 2011 NERC announced a preliminary set of high priority reliability issues
intended to focus ERO program areas including standards setting compliance and training and
education1 Subsequent to this posting NERCrsquos technical and standing committees have
reviewed the identified elements provided suggestions and enhancements and have agreed to
work with stakeholders in accepting accountability for implementing an action plan addressing
these reliability issues This document provides an action plan towards addressing these
reliability issues including priorities and milestones
Top Priority Reliability Issues
The priority list is based partially on experience from reviewing actual system events (topics 1
to 4) and forward looking issues (topics 5 to 8) Though the reliability issues were offered as a
starting point for discussion with industry experts the standing committees believed them
important enough to develop this action plan In the next few years it is expected that new
reliability performance measures and root cause analysis methods being initiated by NERC will
further reinforce the setting of reliability priorities The goal is to develop a list of priorities to
focus work in the one to three year horizon on those areas most likely to have a positive impact
on bulk power system reliability The following high level list addresses technical issues and
does not enumerate policy matters that should be dealt with in alternative governance and
regulatory forums (See Appendix 1 for complete description)
1 Misoperations of relay protection and control systems
2 Human errors by field personnel
3 Ambiguous or incomplete voice communications
4 Right-of-way maintenance
5 Changing resource mix
6 Integration of new technologies
7 Preparedness for high impact low frequency events
8 Non-traditional threats via cyber security vulnerabilities
1 NERC Presidentrsquos Top Priority Issues for Bulk Power System Reliability httpwwwnerccomnews_prphpnpr=723 at httpwwwnerccomfileUploadsFileNewsNERC20President20Top20Priority20BPS20Reliability20Issues201-7-11pdf
Introduction
Reliability Issues Coordinated Action Plan June 2011 2
Roles ndash Reliability Issues Coordinated Action Plan
Since these reliability issues can functionally cross multiple committees coordination is
essential to the successful implementation of the Reliability Issues Coordinated Action Plan The
standing committees and NERC Staff have formulated a coordinated approach to ensure
effectiveness in implementation Figure 1 below provides the roles coordination points and
responsibilities of this coordination effort to support this Reliability Issues Coordinated Action
Plan
Figure 1 Roles ndash Reliability Issues Coordinated Action Plan
Introduction
Reliability Issues Coordinated Action Plan June 2011 3
Next Steps
Once lead standing committees are identified for each of the reliability issues and through
their usual processes they will then direct the appropriate sub-groups review and refine their
respective scopes and consider the needed resources deliverables and milestones In many
instances a subgroup is already in place working on one or more of these reliability issues If
no appropriate subgroup exists the standing committees will develop a draft scope and form a
subgroup to address the reliability issue Figure 2 below describes the work plan development
and implementation process
Figure 2 Work Plan Development and Implementation Process
Lead Standing Committee Identified
Develop Action Plan seek approval from Standing Committees and BOT
Direct appropriate Subgroup to Address Reliability Issue
Deliver on Milestones in Plan
Organization
Reliability Issues Coordinated Action Plan June 2011 4
OOrrggaanniizzaattiioonn
The Electric Reliability Organization (ERO) Strategic Goals through 2015 are summarized in the following key goals2
Goal 1 The ERO will have clear results-based reliability standards that provide for an
adequate level of bulk power system reliability
Goal 2 Bulk power system owners operators and users will demonstrate sustained
cultures of learning and reliability excellence built upon underlying foundations
of compliance and effective risk management and mitigation
Goal 3 The ERO will develop and maintain effective reliability performance measures
and will continue to develop high quality reliability assessments based on long
range and seasonal forecasts as well as emerging issues
Goal 4 Bulk power system owners operators and users will effectively manage risks
from cyber and physical attacks and other high-impact low-frequency events
Goal 5 The ERO will balance the role of being a strong independent enforcement
authority with one of providing owners operators and users timely and
transparent feedback on compliance and effective incentives for improving
reliability
Goal 6 NERC and the regional entities will execute statutory functions in a collaborative
enterprise and thereby achieve efficiencies and effective process controls while
leveraging the expertise of staff and reliability stakeholder resources
Goal 7 The ERO will maintain an exceptional reputation as the trusted leader of the
reliability community and instill a high degree of confidence in the reliability of
the bulk power system
Based on NERCrsquos Strategic Plan and the top priority Issues for bulk power system
reliability the standing committeersquos leadership and NERC staff have assigned lead
committees for each reliability issue and formulated deliverables priorities and
milestones (see Table 1)
2 February 17 2011 Board of Trustees agenda item 7 Electric Reliability Organization Strategic Goals through 2015 httpwwwnerccomdocsdocsbotBOT-0211a-completepdf
Organization
Reliability Issues Coordinated Action Plan June 2011 5
Table 1 Proposed LeadSupport NERC Staff and Standing Committees
Top Priority Issues
NERC Lead
Standing Committee Lead NERC Support
Standing Committee Support
1 M
iso
pe
rati
on
s o
f re
lay
pro
tect
ion
and
co
ntr
ol s
yste
ms
Long
Rodriquez
Connor
Cummings
Bian
Standards Committee
Standard Drafting Teams (SDTs) o Protection System Maintenance o Coordination of Protection
Systems o Generator Verification o Protection System
Misoperations
Planning Committee
System Protection amp Control Subcommittee
Reliability Metrics Working Group
Kezele
Moon
Operating Committee
Compliance and Certification Committee
2 H
um
an e
rro
rs b
y
fie
ld p
ers
on
ne
l
Galloway
Kezele
Operating Committee
Personnel Subcommittee
Long Rodriquez
Connor
Moon
Standards Committee
Reliability Coordination SDT
Operations Communications Protocols SDT
Planning Committee
Compliance and Certification Committee
3 A
mb
igu
ou
s o
r
inco
mp
lete
vo
ice
com
mu
nic
atio
n Galloway
Kezele
Operating Committee
Long Rodriquez
Connor
Moon
Standards Committee
Reliability Coordination SDT
Operations Communications Protocols SDT
Planning Committee
Compliance and Certification Committee
4 R
igh
t-o
f-w
ay
mai
nte
nan
ce Kezele
Carter Operating Committee Connor
Moon
Long Rodriquez
Planning Committee
Compliance and Certification Committee
Standards Committee
Vegetation Management SDT
5 C
han
gin
g
reso
urc
e m
ix
Connor Moura Moura
Moura
Planning Committee
Reliability Assessment Subcommittee
Integration of Variable Generation Task Force
Smart Grid Task Force
Kezele
Moon
Connor Moura
Bian Moura
Operating Committee
Compliance and Certification Committee
Planning Committee
Demand Response Data Task Force
TADSGADS
Smart Grid Task Force
Organization
Reliability Issues Coordinated Action Plan June 2011 6
Top Priority Issues
NERC Lead
Standing Committee Lead NERC Support
Standing Committee Support
6 I
nte
grat
ion
of
ne
w
tech
no
logi
es
Connor Moura Moura
Planning Committee
Smart Grid Task Force
Reliability Assessment Subcommittee
Mix
Moon
Kezele
Critical Infrastructure Protection Committee
Compliance and Certification Committee
Operating Committee
7 P
rep
are
dn
ess
fo
r h
igh
imp
act
low
fre
qu
en
cy e
ven
ts
Connor Bian
Moura
Kezele Kezele
Mix
Roxey
Planning Committee
Spare Equipment Database Task Force
Geomagnetic Disturbance Task Force
Operating Committee
Severe Impact Resilience Task Force
Critical Infrastructure Protection Committee
Cyber Attack Task Force
Moon Compliance and Certification Committee
8 N
on
-tra
dit
ion
al
thre
ats
via
cyb
er-
secu
rity
vuln
era
bili
tie
s
Mix Critical Infrastructure Protection Committee
Connor Moura
Kezele
Moon
Planning Committee
Smart Grid Task Force
Operating Committee
Compliance and Certification Committee
Action Plan
Reliability Issues Coordinated Action Plan
June 2011
7
AAccttiioonn PPllaann
The following Action Plan (Table 2) provides Proposed Enhancements Abstract of activity priorities key deliverables and projected milestones
Table 2 Reliability Issues Action Plan
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
1
Mis
op
erat
ion
s o
f re
lay
pro
tect
ion
an
d c
on
tro
l sys
tem
s
Standards Committee
NERC Reliability Standards
Prepare and achieve approval Reliability Standards that minimize relay control system misoperations
High 1 PRC-005 Protection System
Maintenance 2 PRC-004 Protection System Misoperation
Identification and Correction (Rapid Development Pilot)
3 PRC-024 Generator Performance During Frequency and Voltage Excursions
4 PRC-019 Coordination of Generator Voltage Regulator Controls with Unit Capabilities and Protection
5 PRC-001 Protection System Coordination
1 BOT eta Q3 2011 2 BOT eta Q2 2012 3 BOT eta Q2 2012
4 BOT eta Q4 2012
5 BOT eta Q1 2013
Planning Committee System Protection amp Control Subcommittee
Reliability Metrics Working Group
Provide tools for improvement and measure trends
Enhancing the available tools to planners and operators and measuring trends will support industry efforts to improve
High
1 Guidance for relay maintenance and adequacy of protection engineering
2 Metrics that measure relaycontrol system misoperation
1 SPCS deliver Guide Q2 2012
2 RMWG develops metrics Q4 2011 TADSWG collects data as needed
Low 3 Address ways to enhance operator trainingrelay knowledge
3 SPCS in collaboration with the OCrsquos Personnel Subcommittee deliver tutorial for OC review Q4 2013
2
Hu
man
er
rors
by
fiel
d
per
son
nel
Operating Committee Personnel Subcommittee
Developing root causes lessons learned and guidance on processes can shape industry improvement opportunities
Enhancing industry knowledge of failure modes can improve reliability Standard development on operator training can help ensure successful implementation of recommendations
High 1 Develop guidance for root cause aspects
ndash including planningmanagement decisions
2 Develop refined cause codes to capture root cause
3 Develop processes that lead to quicker sharing of lessons learned
4 Develop guidance on tools development (man‐machine interfacedesign)
1 EAWG develop root cause guidebook by Q4 2012
2 EAWG to develop cause codes by Q4 2013
3 EAWG to streamline lessons learned process by Q4 2011
4 RCWG to create tools development guidebook Q4 2014
Action Plan
Reliability Issues Coordinated Action Plan June 2011 8
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
Medium 5 Develop process guidance for task design
(process resolutions plan the work and work the plan)
6 Support Personnel Training Standard
5 Personnel Subcommittee to prioritize and develop task design guidance Q3 2012
6 Personnel Subcommittee to develop SAR by Q4 2012
3
Am
big
uo
us
or
inco
mp
lete
vo
ice
com
mu
nic
atio
n
Standards Committee NERC Reliability Standards
Prepare and approve Reliability Standards that address communications
High 1 COM-002-3 ndash Communications and
Coordination Standard 2 COM-003-1 ndash Operating Personnel
Communications Protocols Standard
1 BOT eta Q1 2012
2 BOT eta Q4 2012
Operating Committee
Measurably improved communications in system operations
Provide guidance clarifying for operators the role of communications in improvement of reliability Should be a subset of 2 (good practices training deliverables etc)
Medium 1 Use other industries for guidance 2 Provide guidance on the benefits of using
of standard operating language or good practices separate from three-part communications Clarify for operators when communications are mission critical and when prescriptive forms impede reliability
3 Provide clear interpretations of the relevant reliability standards so that there is certainty for directives and associated communication actions
1 RCWG investigates and documents other industryrsquos experience and use of communications Report Q4 2012
2 RCWG develops guidelines on benefits from standard communication approaches Detail the use of communications to improve while not reducing reliability Q3 2013
3 Operating Committee works with NERCrsquos Compliance Operations on Compliance Application Notices (CAN) to eliminate ambiguous terms used in operations Q2 2012
4
Rig
ht-
of-
way
m
ain
ten
ance
Operating Committee (Primary Technical Committee ndash not determined)
Measurably improved right-of-way maintenance
Ensure that ROW maintenance practices result incompliance with FAC-003-2 requirements thereby maintaining reliability
High 1 Document actions undertaken that
address the facility ratings Alert results Leverage the North American Transmission Forum work for planning calculationsratings
2 Provide guidance for operational coordination among operating units TOPs RCs and BAs for different situations
1 Subgroup formed in collaboration with NERC and the Regional Entities along with the North American Transmission forum to document the result of the FAC-003-2 plans to develop industry guidance and action Q4 2011
2 Subgroup should develop guidelines for coordination among TOPs RCs and BAs Q4 2012
Action Plan
Reliability Issues Coordinated Action Plan June 2011 9
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
Standards Committee NERC Reliability Standards
Prepare and achieve approval of Reliability Standard for Transmission Vegetation Management
Low 1 FAC-003-2 ndash Transmission Vegetation
Management 1 BOT eta Q3 2011
5
Ch
angi
ng
reso
urc
e m
ix
Planning Committee
Reliability Assessment Subcommittee
Integration of Variable Generation Task Force
Smart Grid Task Force
Ready industry for the changing resource mix and technology integration by providing guidance and input into NERCrsquos Reliability Standards
Unprecedented change in resource mix being realized through retirement of aging units capital fuel costs along with environmental regulations This change along with technological advances in communications and control can change the well understood character of the bulk power system requiring changes in the planning approaches to ensure operational reliability
Medium 1 IVGTF ndash addressing frequency voltage
response resource flexibility contingency reserves
2 SGTF ndash addressing reliability impacts 3 RIS-RAS - addressing scenarios resource
mix planning probabilistic assessments 4 Scenarios that address resource mix
implications such as natural gas interdependence
5 Evaluate benefit of probabilistic metrics and provide guidance to plannersoperators
6 Develop targetsmetricsrefinements for planningoperation
7 Provide guidance on tools for operators 8 Develop potential standards proposals
or guidanceadvisories that enhance reliability
9 Provide recommendations for expanded planning assessments to address resource mix changes
1 through 13 See Planning Committeersquos Strategic Plan
3
and Action Plan4
3 through 6 Resource Issues and Reliability Assessment Subcommittees
Annual Summer Reliability Assessment
Annual Winter Reliability Assessment
Annual Long-Term Reliability Assessment o Scenarios o Emerging Issues o Probabilistic
3 httpwwwnerccomdocspcAgendaItem_5a_PC_2011-2016_Strategic_Plan_v5_LINKpdf
4 httpwwwnerccomdocspcAgendaItem_5ai_PC_Strategic_Plan_Next20Steps2020Future20Work20Plan_v5_LINKpdf
Action Plan
Reliability Issues Coordinated Action Plan June 2011 10
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
6
Inte
grat
ion
of
new
te
chn
olo
gies
Planning Committee
Smart Grid Task Force
Reliability Assessment Subcommittee
10 Smart Grid impacts from distribution
systems (Address cyber aspects in 8 Non-Traditional Threats via Cyber-Security Vulnerabilities)
11 IVGTF dealing with distribution (renewables EV and conventional) resource integration
12 DRDTF addressing high levels of demand response integration
13 TIS and SPCS will provide guidance for modeling and controls systems managementcoordination
Assessment
7
Pre
par
edn
ess
for
hig
h
imp
act
low
fre
qu
ency
ev
ents
Planning Committee
Spare Equipment Database Task Force
Geomagnetic Disturbance Task Force
Operating Committee
Severe Impact Resilience Task Force
Critical Infrastructure Protection Committee
Cyber Attack Task Force
Address the risks from selected high impact low frequency events which can have unacceptable consequences on bulk power system reliability
The bulk power system has significant amounts of built-in resiliency However it has been planned and operated with the known risks to successfully manage system performance With changing threats from cyber physical and new facts about GMD industry will adjust their planning and operational activities to address these evolving risks
High 1 The Electricity Subsector Coordinating
Council has developed a BOT approved Critical Infrastructure Strategic Roadmap
5 in Q4 2010
2 The technical Committees have developed a Critical Infrastructure Strategic Initiatives Coordinated Action Plan
6 BOT approved in Q4 2010
1-2 Covered in the technical committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan
5 httpwwwnerccomdocsesccESCC_Critical_Infrastructure_Strategic_Roadmappdf
6 httpwwwnerccomdocsciscapCritical_Infrastructure_Strategic_Initiatives_Coordinated_Action_Plan_BOT_Apprd_11-2010pdf
Action Plan
Reliability Issues Coordinated Action Plan June 2011 11
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
8
No
n-t
rad
itio
nal
th
reat
s vi
a cy
ber
-se
curi
ty
vuln
erab
iliti
es
Critical Infrastructure Protection Committee
A resilient system fortified by industry planning and operational practices
The continuously evolving threat from cyber-security vulnerabilities requires new processes and procedures both for system planning and operations Industry awareness and cooperation with governmental jurisdictions are key aspects for this improved situational awareness
High
1 Also part of the deliverables in item 7 Preparedness for High Impact Low Frequency events
2 Metric development to measure cyber strength being developed with the Planning Committeersquos Smart Grid Task Force (SGTF)
3 Ongoing industry Alerts as required 4 Guidelines required to advise industry on
the establishment of appropriate cyber-security programs in their organizations
1 Covered in the technical
committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan
2 See Planning Committeersquos Strategic Plan and Action Plan along with the work plan for the SGTF
7
3 See NERCrsquos Alert website8
4 A subgroup formed to develop guidelines reviewing other industryrsquos to take advantage of existing knowledge 2012 Q4
7 httpwwwnerccomfilesSGTF_Report_Final_posted_v11pdf
8 httpwwwnerccompagephpcid=5|63
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
12
AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess
Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the
following list and abstract description was developed
1 Misoperations of relay protection and control systems ndash Nearly all major system failures
excluding perhaps those caused by severe weather have misoperations of relays or
automatic controls as a factor contributing to the propagation of the failure Protection
systems are designed to operate reliably when needed under the presence of a fault on the
system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without
allowing the fault to transfer into adjoining facilities The greater the number of facilities
involved in an event the more severe the impact to the rest of the bulk power system with
cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout
being the extreme Relays can misoperate either operate when not needed or fail to
operate when needed for a number of reasons First the device could experience an
internal failure ndash but this is rare Most commonly relays fail to operate correctly due to
incorrect settings improper coordination (of timing and set points) with other devices
ineffective maintenance and testing or failure of communications channels or power
supplies Preventable errors can be introduced by field personnel and their supervisors or
more programmatically by the organization Adding to the risk is that system protection is
an extremely complex engineering field ndashthere are many practitioners but few masters
2 Human errors by field personnel ndash Field personnel play an important role in the
maintenance and operation of the bulk power system They often are switching equipment
in and out of service and aligning alternative configurations Risks can be introduced when
field personnel operate equipment in a manner that reduces the redundancy of the bulk
power system sometimes even creating single points of failure that would not exist
normally Taking outages of equipment to conduct maintenance is a routine and necessary
part of reliable bulk power system operation However any alterations to the configuration
of the network must be carefully planned in advance to minimize loss of redundancy and
avoid unintended single points of failure It is also important that such changes and risks be
communicated to system operators and reliability coordinators in advance so that they can
make adjustments in their operating plans and reliability assessments
3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system
operators and reliability coordinators are comfortable with informal communications with
field and power plant personnel and neighboring systems Experience from analyzing
various events indicates there is often a sense of awkwardness when personnel transition
from conversational discussion to issuing reliability instructions It is also human nature to
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
13
be uncomfortable in applying formal communication procedures after personnel have
developed informal styles over many years Confusion in making the transition from normal
conversation to formal communications can introduce misunderstandings and possibly even
incorrect actions or assumptions Further once the need to transition to more formal
structure is recognized the transition is often not complete or effective Results can include
unclear instructions confusion whether an instruction is a suggestion or a directive whether
specific action is required or a set of alternative actions are permissible and confusion over
what elements of the system are being addressed
4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation
management programs as a key recommendation for avoiding future cascading failures
More broadly any encroachments in the right-of-way that reduce clearances to the point of
lowering facility ratings or reducing the randomness of possible contacts can be a risk to
reliability Although these impacts may not always be readily apparent under extreme wind
and temperature conditions they may become more of a risk to bulk power system
reliability There are many challenges to effective right-of-way maintenance especially
maintaining proper clearances including interventions by private landowners local
municipalities and federal and state landowners
5 Changing resource mix ndash Energy and environmental policies along with energy markets are
driving proposals toward unprecedented changes in the resource mix of the bulk power
system Examples include integration of significant amounts of renewable (variable such as
wind and solar) natural gas storage and demand resources to provide energy and capacity
Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a
century of operational experience with the existing resource mix However integration of
these new resources results in operating characteristics significantly different from
conventional steam production facilities An array of reliability services must be provided
over a range of time horizons from seconds to minutes to hours and days and annually such
as load following contingency reserves frequency response reactive supply capacity and
voltage control and power system stability Continued reliable operation of the bulk power
system will require an industry dialog with policymakers and regulators Understanding the
impacts on reliability will depend on accurate modeling of new resources and development
of new methods and tools for the provision of essential reliability services
6 Integration of new technologies ndash Introduction of electric vehicles demand-side
management variable generation distributed resources and smart grid technologies
presents tremendous opportunities but also introduces changes to the operating
characteristics of the bulk power system Integration of these new technologies requires
changes in the way the bulk power system is planned and operated to maintain reliability
Further additional toolsmodels are required to support their integration to meet policy and
strategic goals Without these changes it will be challenging to maintain reliability with
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
14
large-scale deployments For example some smart grid devicessystems increase exposure
to cyber threats while variable generation requires additional ancillary services Integration
of these new technologies must be achieved in a manner that does not undermine existing
levels of stability resilience and security of the bulk power system
7 Preparedness for high impact low frequency events ndash Although there is a wide range of
threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for
possible events that could debilitate the bulk power system for extended periods such as
widespread coordinated physicalcyber attacks or geomagnetic storms The industry must
consider improving the design of the bulk power system to address these potential risks and
prepare coordinated North American response plans for use during catastrophic events and
be ready to deploy those plans to restore essential services in a timely manner
8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-
based programs policies and processes to prepare for react to and recover from cyber
security vulnerabilities is a high priority for the industry The bulk power system has not yet
experienced wide-spread cyber-attacks and a contributing factor has been the traditional
physical separation between the industrial control systemSCADA environment and the
business and administrative networks This situation however is rapidly changing
predominantly due to the efficiencies that can be achieved by leveraging shared networks
and resources so now even physically separated environments are susceptible For example
the bulk power system could be as vulnerable to digital threats as IT systems but with far
more critical implications as the recent Stuxnet virus has shown Disabling or turning
systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial
control system software can be changed and data can be stolen without intrusions even
being detected These injection vectors serve as a blueprint for future attackers who wish to
access controllers safety systems and protection devices to insert malicious code targeting
changes to set points and switches as well as alteration or suppression of measurements
Standing Committee Coordination Group Roster
Reliability Issues Coordinated Action Plan
June 2011
15
SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr
Position
Name Title
Company City StateProvince
Phone E-mail
CCC Chair W Clay Smith
2100 East Exchange Place Tucker Georgia 30084-5336
(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom
CCC Vice Chair Terry L Bilke
Director Standards and Compliance
Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202
317 249-5463 317 249-5358 Fax tbilkemidwestisoorg
CCC Vice Chair Brett Hallborg
Manager of Operations Training
BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2
(604) 455-1778 bretthallborgbchydroc
om
CIPC Chair Barry Lawson
Manager Power Delivery
National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203
(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo
p
CIPC Vice Chair Cyber
Charles F Abell PE Supervising Engineer
Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103
(314) 554-3817 (314) 206-0046 Fx cfabellamerencom
CIPC Vice Chair Physical Security
Robert D Canada Business Assurance Principal
Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308
(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom
OC Chair JS Holeman
Director System Operations
Duke Energy
(704) 382-0011 SamHolemanduke-energycom
Action Plan
Reliability Issues Coordinated Action Plan June 2011 16
Position
Name Title
Company City StateProvince
Phone E-mail
OC Vice Chair Tom Bowe
Executive Director of Compliance
PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403
610-666-4776 (610) 666-4287 Fx bowetpjmcom
PC Chair Tom Burgess
Director FERC Compliance
FirstEnergy Corp
330-384-5225 burgesstfirstenergycorpcom
PC Vice Chair Jeffrey L Mitchell
Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333
(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg
PCGC Chair Jacob Burger
Transmission System Control Coordinator
Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832
(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom
SC Chair Allen Mosher
Senior Director of Policy Analysis and Reliability
American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715
(202) 467-2944 (202) 467-2992 Fx amosherappanetorg
SC Vice Chair PS (Ben) Li
President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6
(647) 388-1498 (905) 887-2235 Fx benbenlica
REMG Representative
Edward A Schwerdt President and CEO
Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703
(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg
NERC Staff Roster
Reliability Issues Coordinated Action Plan
June 2011
17
NNEERRCC SSttaaffff RRoosstteerr
Position
Name Title
PhoneE-mail
NERC Staff Alvin J (AJ) Connor
Manager of Power System Analysis (609) 751-2579 ajconnornercnet
NERC Staff Tom Galloway
Senior Vice President and Chief Reliability Officer
(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet
NERC Staff Brian M Harrell
Manager of CIP Standards Training and Awareness
(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet
NERC Staff Larry J Kezele
Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet
NERC Staff Mark G Lauby
Vice President and Director of Reliability Assessment and Performance Analysis
(609) 452-8060 (609) 452-9550 Fax marklaubynercnet
NERC Staff Maureen E Long
Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet
NERC Staff Scott R Mix
CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet
NERC Staff Michael Moon
Director of Compliance Operations
(404) 446-2560 michaelmoonnercnet
NERC Staff Andrew Rodriquez Director of Standards Development
(404) 446-2560 andyrodriqueznercnet
NERC Staff Peter Knoetgen Director of Training and Accreditation
404-446-9688 peterknoetgennercnet
NERC Staff Herb Schrayshuen
Vice President and Director of Standards
((315) 439-1390 herbschrayshuennercnet
NERC Staff Mark Weatherford
Vice President and Chief Security Officer
(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet
Introduction
Reliability Issues Coordinated Action Plan June 2011 1
IInnttrroodduuccttiioonn
Background
On January 7 2011 NERC announced a preliminary set of high priority reliability issues
intended to focus ERO program areas including standards setting compliance and training and
education1 Subsequent to this posting NERCrsquos technical and standing committees have
reviewed the identified elements provided suggestions and enhancements and have agreed to
work with stakeholders in accepting accountability for implementing an action plan addressing
these reliability issues This document provides an action plan towards addressing these
reliability issues including priorities and milestones
Top Priority Reliability Issues
The priority list is based partially on experience from reviewing actual system events (topics 1
to 4) and forward looking issues (topics 5 to 8) Though the reliability issues were offered as a
starting point for discussion with industry experts the standing committees believed them
important enough to develop this action plan In the next few years it is expected that new
reliability performance measures and root cause analysis methods being initiated by NERC will
further reinforce the setting of reliability priorities The goal is to develop a list of priorities to
focus work in the one to three year horizon on those areas most likely to have a positive impact
on bulk power system reliability The following high level list addresses technical issues and
does not enumerate policy matters that should be dealt with in alternative governance and
regulatory forums (See Appendix 1 for complete description)
1 Misoperations of relay protection and control systems
2 Human errors by field personnel
3 Ambiguous or incomplete voice communications
4 Right-of-way maintenance
5 Changing resource mix
6 Integration of new technologies
7 Preparedness for high impact low frequency events
8 Non-traditional threats via cyber security vulnerabilities
1 NERC Presidentrsquos Top Priority Issues for Bulk Power System Reliability httpwwwnerccomnews_prphpnpr=723 at httpwwwnerccomfileUploadsFileNewsNERC20President20Top20Priority20BPS20Reliability20Issues201-7-11pdf
Introduction
Reliability Issues Coordinated Action Plan June 2011 2
Roles ndash Reliability Issues Coordinated Action Plan
Since these reliability issues can functionally cross multiple committees coordination is
essential to the successful implementation of the Reliability Issues Coordinated Action Plan The
standing committees and NERC Staff have formulated a coordinated approach to ensure
effectiveness in implementation Figure 1 below provides the roles coordination points and
responsibilities of this coordination effort to support this Reliability Issues Coordinated Action
Plan
Figure 1 Roles ndash Reliability Issues Coordinated Action Plan
Introduction
Reliability Issues Coordinated Action Plan June 2011 3
Next Steps
Once lead standing committees are identified for each of the reliability issues and through
their usual processes they will then direct the appropriate sub-groups review and refine their
respective scopes and consider the needed resources deliverables and milestones In many
instances a subgroup is already in place working on one or more of these reliability issues If
no appropriate subgroup exists the standing committees will develop a draft scope and form a
subgroup to address the reliability issue Figure 2 below describes the work plan development
and implementation process
Figure 2 Work Plan Development and Implementation Process
Lead Standing Committee Identified
Develop Action Plan seek approval from Standing Committees and BOT
Direct appropriate Subgroup to Address Reliability Issue
Deliver on Milestones in Plan
Organization
Reliability Issues Coordinated Action Plan June 2011 4
OOrrggaanniizzaattiioonn
The Electric Reliability Organization (ERO) Strategic Goals through 2015 are summarized in the following key goals2
Goal 1 The ERO will have clear results-based reliability standards that provide for an
adequate level of bulk power system reliability
Goal 2 Bulk power system owners operators and users will demonstrate sustained
cultures of learning and reliability excellence built upon underlying foundations
of compliance and effective risk management and mitigation
Goal 3 The ERO will develop and maintain effective reliability performance measures
and will continue to develop high quality reliability assessments based on long
range and seasonal forecasts as well as emerging issues
Goal 4 Bulk power system owners operators and users will effectively manage risks
from cyber and physical attacks and other high-impact low-frequency events
Goal 5 The ERO will balance the role of being a strong independent enforcement
authority with one of providing owners operators and users timely and
transparent feedback on compliance and effective incentives for improving
reliability
Goal 6 NERC and the regional entities will execute statutory functions in a collaborative
enterprise and thereby achieve efficiencies and effective process controls while
leveraging the expertise of staff and reliability stakeholder resources
Goal 7 The ERO will maintain an exceptional reputation as the trusted leader of the
reliability community and instill a high degree of confidence in the reliability of
the bulk power system
Based on NERCrsquos Strategic Plan and the top priority Issues for bulk power system
reliability the standing committeersquos leadership and NERC staff have assigned lead
committees for each reliability issue and formulated deliverables priorities and
milestones (see Table 1)
2 February 17 2011 Board of Trustees agenda item 7 Electric Reliability Organization Strategic Goals through 2015 httpwwwnerccomdocsdocsbotBOT-0211a-completepdf
Organization
Reliability Issues Coordinated Action Plan June 2011 5
Table 1 Proposed LeadSupport NERC Staff and Standing Committees
Top Priority Issues
NERC Lead
Standing Committee Lead NERC Support
Standing Committee Support
1 M
iso
pe
rati
on
s o
f re
lay
pro
tect
ion
and
co
ntr
ol s
yste
ms
Long
Rodriquez
Connor
Cummings
Bian
Standards Committee
Standard Drafting Teams (SDTs) o Protection System Maintenance o Coordination of Protection
Systems o Generator Verification o Protection System
Misoperations
Planning Committee
System Protection amp Control Subcommittee
Reliability Metrics Working Group
Kezele
Moon
Operating Committee
Compliance and Certification Committee
2 H
um
an e
rro
rs b
y
fie
ld p
ers
on
ne
l
Galloway
Kezele
Operating Committee
Personnel Subcommittee
Long Rodriquez
Connor
Moon
Standards Committee
Reliability Coordination SDT
Operations Communications Protocols SDT
Planning Committee
Compliance and Certification Committee
3 A
mb
igu
ou
s o
r
inco
mp
lete
vo
ice
com
mu
nic
atio
n Galloway
Kezele
Operating Committee
Long Rodriquez
Connor
Moon
Standards Committee
Reliability Coordination SDT
Operations Communications Protocols SDT
Planning Committee
Compliance and Certification Committee
4 R
igh
t-o
f-w
ay
mai
nte
nan
ce Kezele
Carter Operating Committee Connor
Moon
Long Rodriquez
Planning Committee
Compliance and Certification Committee
Standards Committee
Vegetation Management SDT
5 C
han
gin
g
reso
urc
e m
ix
Connor Moura Moura
Moura
Planning Committee
Reliability Assessment Subcommittee
Integration of Variable Generation Task Force
Smart Grid Task Force
Kezele
Moon
Connor Moura
Bian Moura
Operating Committee
Compliance and Certification Committee
Planning Committee
Demand Response Data Task Force
TADSGADS
Smart Grid Task Force
Organization
Reliability Issues Coordinated Action Plan June 2011 6
Top Priority Issues
NERC Lead
Standing Committee Lead NERC Support
Standing Committee Support
6 I
nte
grat
ion
of
ne
w
tech
no
logi
es
Connor Moura Moura
Planning Committee
Smart Grid Task Force
Reliability Assessment Subcommittee
Mix
Moon
Kezele
Critical Infrastructure Protection Committee
Compliance and Certification Committee
Operating Committee
7 P
rep
are
dn
ess
fo
r h
igh
imp
act
low
fre
qu
en
cy e
ven
ts
Connor Bian
Moura
Kezele Kezele
Mix
Roxey
Planning Committee
Spare Equipment Database Task Force
Geomagnetic Disturbance Task Force
Operating Committee
Severe Impact Resilience Task Force
Critical Infrastructure Protection Committee
Cyber Attack Task Force
Moon Compliance and Certification Committee
8 N
on
-tra
dit
ion
al
thre
ats
via
cyb
er-
secu
rity
vuln
era
bili
tie
s
Mix Critical Infrastructure Protection Committee
Connor Moura
Kezele
Moon
Planning Committee
Smart Grid Task Force
Operating Committee
Compliance and Certification Committee
Action Plan
Reliability Issues Coordinated Action Plan
June 2011
7
AAccttiioonn PPllaann
The following Action Plan (Table 2) provides Proposed Enhancements Abstract of activity priorities key deliverables and projected milestones
Table 2 Reliability Issues Action Plan
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
1
Mis
op
erat
ion
s o
f re
lay
pro
tect
ion
an
d c
on
tro
l sys
tem
s
Standards Committee
NERC Reliability Standards
Prepare and achieve approval Reliability Standards that minimize relay control system misoperations
High 1 PRC-005 Protection System
Maintenance 2 PRC-004 Protection System Misoperation
Identification and Correction (Rapid Development Pilot)
3 PRC-024 Generator Performance During Frequency and Voltage Excursions
4 PRC-019 Coordination of Generator Voltage Regulator Controls with Unit Capabilities and Protection
5 PRC-001 Protection System Coordination
1 BOT eta Q3 2011 2 BOT eta Q2 2012 3 BOT eta Q2 2012
4 BOT eta Q4 2012
5 BOT eta Q1 2013
Planning Committee System Protection amp Control Subcommittee
Reliability Metrics Working Group
Provide tools for improvement and measure trends
Enhancing the available tools to planners and operators and measuring trends will support industry efforts to improve
High
1 Guidance for relay maintenance and adequacy of protection engineering
2 Metrics that measure relaycontrol system misoperation
1 SPCS deliver Guide Q2 2012
2 RMWG develops metrics Q4 2011 TADSWG collects data as needed
Low 3 Address ways to enhance operator trainingrelay knowledge
3 SPCS in collaboration with the OCrsquos Personnel Subcommittee deliver tutorial for OC review Q4 2013
2
Hu
man
er
rors
by
fiel
d
per
son
nel
Operating Committee Personnel Subcommittee
Developing root causes lessons learned and guidance on processes can shape industry improvement opportunities
Enhancing industry knowledge of failure modes can improve reliability Standard development on operator training can help ensure successful implementation of recommendations
High 1 Develop guidance for root cause aspects
ndash including planningmanagement decisions
2 Develop refined cause codes to capture root cause
3 Develop processes that lead to quicker sharing of lessons learned
4 Develop guidance on tools development (man‐machine interfacedesign)
1 EAWG develop root cause guidebook by Q4 2012
2 EAWG to develop cause codes by Q4 2013
3 EAWG to streamline lessons learned process by Q4 2011
4 RCWG to create tools development guidebook Q4 2014
Action Plan
Reliability Issues Coordinated Action Plan June 2011 8
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
Medium 5 Develop process guidance for task design
(process resolutions plan the work and work the plan)
6 Support Personnel Training Standard
5 Personnel Subcommittee to prioritize and develop task design guidance Q3 2012
6 Personnel Subcommittee to develop SAR by Q4 2012
3
Am
big
uo
us
or
inco
mp
lete
vo
ice
com
mu
nic
atio
n
Standards Committee NERC Reliability Standards
Prepare and approve Reliability Standards that address communications
High 1 COM-002-3 ndash Communications and
Coordination Standard 2 COM-003-1 ndash Operating Personnel
Communications Protocols Standard
1 BOT eta Q1 2012
2 BOT eta Q4 2012
Operating Committee
Measurably improved communications in system operations
Provide guidance clarifying for operators the role of communications in improvement of reliability Should be a subset of 2 (good practices training deliverables etc)
Medium 1 Use other industries for guidance 2 Provide guidance on the benefits of using
of standard operating language or good practices separate from three-part communications Clarify for operators when communications are mission critical and when prescriptive forms impede reliability
3 Provide clear interpretations of the relevant reliability standards so that there is certainty for directives and associated communication actions
1 RCWG investigates and documents other industryrsquos experience and use of communications Report Q4 2012
2 RCWG develops guidelines on benefits from standard communication approaches Detail the use of communications to improve while not reducing reliability Q3 2013
3 Operating Committee works with NERCrsquos Compliance Operations on Compliance Application Notices (CAN) to eliminate ambiguous terms used in operations Q2 2012
4
Rig
ht-
of-
way
m
ain
ten
ance
Operating Committee (Primary Technical Committee ndash not determined)
Measurably improved right-of-way maintenance
Ensure that ROW maintenance practices result incompliance with FAC-003-2 requirements thereby maintaining reliability
High 1 Document actions undertaken that
address the facility ratings Alert results Leverage the North American Transmission Forum work for planning calculationsratings
2 Provide guidance for operational coordination among operating units TOPs RCs and BAs for different situations
1 Subgroup formed in collaboration with NERC and the Regional Entities along with the North American Transmission forum to document the result of the FAC-003-2 plans to develop industry guidance and action Q4 2011
2 Subgroup should develop guidelines for coordination among TOPs RCs and BAs Q4 2012
Action Plan
Reliability Issues Coordinated Action Plan June 2011 9
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
Standards Committee NERC Reliability Standards
Prepare and achieve approval of Reliability Standard for Transmission Vegetation Management
Low 1 FAC-003-2 ndash Transmission Vegetation
Management 1 BOT eta Q3 2011
5
Ch
angi
ng
reso
urc
e m
ix
Planning Committee
Reliability Assessment Subcommittee
Integration of Variable Generation Task Force
Smart Grid Task Force
Ready industry for the changing resource mix and technology integration by providing guidance and input into NERCrsquos Reliability Standards
Unprecedented change in resource mix being realized through retirement of aging units capital fuel costs along with environmental regulations This change along with technological advances in communications and control can change the well understood character of the bulk power system requiring changes in the planning approaches to ensure operational reliability
Medium 1 IVGTF ndash addressing frequency voltage
response resource flexibility contingency reserves
2 SGTF ndash addressing reliability impacts 3 RIS-RAS - addressing scenarios resource
mix planning probabilistic assessments 4 Scenarios that address resource mix
implications such as natural gas interdependence
5 Evaluate benefit of probabilistic metrics and provide guidance to plannersoperators
6 Develop targetsmetricsrefinements for planningoperation
7 Provide guidance on tools for operators 8 Develop potential standards proposals
or guidanceadvisories that enhance reliability
9 Provide recommendations for expanded planning assessments to address resource mix changes
1 through 13 See Planning Committeersquos Strategic Plan
3
and Action Plan4
3 through 6 Resource Issues and Reliability Assessment Subcommittees
Annual Summer Reliability Assessment
Annual Winter Reliability Assessment
Annual Long-Term Reliability Assessment o Scenarios o Emerging Issues o Probabilistic
3 httpwwwnerccomdocspcAgendaItem_5a_PC_2011-2016_Strategic_Plan_v5_LINKpdf
4 httpwwwnerccomdocspcAgendaItem_5ai_PC_Strategic_Plan_Next20Steps2020Future20Work20Plan_v5_LINKpdf
Action Plan
Reliability Issues Coordinated Action Plan June 2011 10
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
6
Inte
grat
ion
of
new
te
chn
olo
gies
Planning Committee
Smart Grid Task Force
Reliability Assessment Subcommittee
10 Smart Grid impacts from distribution
systems (Address cyber aspects in 8 Non-Traditional Threats via Cyber-Security Vulnerabilities)
11 IVGTF dealing with distribution (renewables EV and conventional) resource integration
12 DRDTF addressing high levels of demand response integration
13 TIS and SPCS will provide guidance for modeling and controls systems managementcoordination
Assessment
7
Pre
par
edn
ess
for
hig
h
imp
act
low
fre
qu
ency
ev
ents
Planning Committee
Spare Equipment Database Task Force
Geomagnetic Disturbance Task Force
Operating Committee
Severe Impact Resilience Task Force
Critical Infrastructure Protection Committee
Cyber Attack Task Force
Address the risks from selected high impact low frequency events which can have unacceptable consequences on bulk power system reliability
The bulk power system has significant amounts of built-in resiliency However it has been planned and operated with the known risks to successfully manage system performance With changing threats from cyber physical and new facts about GMD industry will adjust their planning and operational activities to address these evolving risks
High 1 The Electricity Subsector Coordinating
Council has developed a BOT approved Critical Infrastructure Strategic Roadmap
5 in Q4 2010
2 The technical Committees have developed a Critical Infrastructure Strategic Initiatives Coordinated Action Plan
6 BOT approved in Q4 2010
1-2 Covered in the technical committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan
5 httpwwwnerccomdocsesccESCC_Critical_Infrastructure_Strategic_Roadmappdf
6 httpwwwnerccomdocsciscapCritical_Infrastructure_Strategic_Initiatives_Coordinated_Action_Plan_BOT_Apprd_11-2010pdf
Action Plan
Reliability Issues Coordinated Action Plan June 2011 11
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
8
No
n-t
rad
itio
nal
th
reat
s vi
a cy
ber
-se
curi
ty
vuln
erab
iliti
es
Critical Infrastructure Protection Committee
A resilient system fortified by industry planning and operational practices
The continuously evolving threat from cyber-security vulnerabilities requires new processes and procedures both for system planning and operations Industry awareness and cooperation with governmental jurisdictions are key aspects for this improved situational awareness
High
1 Also part of the deliverables in item 7 Preparedness for High Impact Low Frequency events
2 Metric development to measure cyber strength being developed with the Planning Committeersquos Smart Grid Task Force (SGTF)
3 Ongoing industry Alerts as required 4 Guidelines required to advise industry on
the establishment of appropriate cyber-security programs in their organizations
1 Covered in the technical
committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan
2 See Planning Committeersquos Strategic Plan and Action Plan along with the work plan for the SGTF
7
3 See NERCrsquos Alert website8
4 A subgroup formed to develop guidelines reviewing other industryrsquos to take advantage of existing knowledge 2012 Q4
7 httpwwwnerccomfilesSGTF_Report_Final_posted_v11pdf
8 httpwwwnerccompagephpcid=5|63
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
12
AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess
Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the
following list and abstract description was developed
1 Misoperations of relay protection and control systems ndash Nearly all major system failures
excluding perhaps those caused by severe weather have misoperations of relays or
automatic controls as a factor contributing to the propagation of the failure Protection
systems are designed to operate reliably when needed under the presence of a fault on the
system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without
allowing the fault to transfer into adjoining facilities The greater the number of facilities
involved in an event the more severe the impact to the rest of the bulk power system with
cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout
being the extreme Relays can misoperate either operate when not needed or fail to
operate when needed for a number of reasons First the device could experience an
internal failure ndash but this is rare Most commonly relays fail to operate correctly due to
incorrect settings improper coordination (of timing and set points) with other devices
ineffective maintenance and testing or failure of communications channels or power
supplies Preventable errors can be introduced by field personnel and their supervisors or
more programmatically by the organization Adding to the risk is that system protection is
an extremely complex engineering field ndashthere are many practitioners but few masters
2 Human errors by field personnel ndash Field personnel play an important role in the
maintenance and operation of the bulk power system They often are switching equipment
in and out of service and aligning alternative configurations Risks can be introduced when
field personnel operate equipment in a manner that reduces the redundancy of the bulk
power system sometimes even creating single points of failure that would not exist
normally Taking outages of equipment to conduct maintenance is a routine and necessary
part of reliable bulk power system operation However any alterations to the configuration
of the network must be carefully planned in advance to minimize loss of redundancy and
avoid unintended single points of failure It is also important that such changes and risks be
communicated to system operators and reliability coordinators in advance so that they can
make adjustments in their operating plans and reliability assessments
3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system
operators and reliability coordinators are comfortable with informal communications with
field and power plant personnel and neighboring systems Experience from analyzing
various events indicates there is often a sense of awkwardness when personnel transition
from conversational discussion to issuing reliability instructions It is also human nature to
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
13
be uncomfortable in applying formal communication procedures after personnel have
developed informal styles over many years Confusion in making the transition from normal
conversation to formal communications can introduce misunderstandings and possibly even
incorrect actions or assumptions Further once the need to transition to more formal
structure is recognized the transition is often not complete or effective Results can include
unclear instructions confusion whether an instruction is a suggestion or a directive whether
specific action is required or a set of alternative actions are permissible and confusion over
what elements of the system are being addressed
4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation
management programs as a key recommendation for avoiding future cascading failures
More broadly any encroachments in the right-of-way that reduce clearances to the point of
lowering facility ratings or reducing the randomness of possible contacts can be a risk to
reliability Although these impacts may not always be readily apparent under extreme wind
and temperature conditions they may become more of a risk to bulk power system
reliability There are many challenges to effective right-of-way maintenance especially
maintaining proper clearances including interventions by private landowners local
municipalities and federal and state landowners
5 Changing resource mix ndash Energy and environmental policies along with energy markets are
driving proposals toward unprecedented changes in the resource mix of the bulk power
system Examples include integration of significant amounts of renewable (variable such as
wind and solar) natural gas storage and demand resources to provide energy and capacity
Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a
century of operational experience with the existing resource mix However integration of
these new resources results in operating characteristics significantly different from
conventional steam production facilities An array of reliability services must be provided
over a range of time horizons from seconds to minutes to hours and days and annually such
as load following contingency reserves frequency response reactive supply capacity and
voltage control and power system stability Continued reliable operation of the bulk power
system will require an industry dialog with policymakers and regulators Understanding the
impacts on reliability will depend on accurate modeling of new resources and development
of new methods and tools for the provision of essential reliability services
6 Integration of new technologies ndash Introduction of electric vehicles demand-side
management variable generation distributed resources and smart grid technologies
presents tremendous opportunities but also introduces changes to the operating
characteristics of the bulk power system Integration of these new technologies requires
changes in the way the bulk power system is planned and operated to maintain reliability
Further additional toolsmodels are required to support their integration to meet policy and
strategic goals Without these changes it will be challenging to maintain reliability with
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
14
large-scale deployments For example some smart grid devicessystems increase exposure
to cyber threats while variable generation requires additional ancillary services Integration
of these new technologies must be achieved in a manner that does not undermine existing
levels of stability resilience and security of the bulk power system
7 Preparedness for high impact low frequency events ndash Although there is a wide range of
threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for
possible events that could debilitate the bulk power system for extended periods such as
widespread coordinated physicalcyber attacks or geomagnetic storms The industry must
consider improving the design of the bulk power system to address these potential risks and
prepare coordinated North American response plans for use during catastrophic events and
be ready to deploy those plans to restore essential services in a timely manner
8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-
based programs policies and processes to prepare for react to and recover from cyber
security vulnerabilities is a high priority for the industry The bulk power system has not yet
experienced wide-spread cyber-attacks and a contributing factor has been the traditional
physical separation between the industrial control systemSCADA environment and the
business and administrative networks This situation however is rapidly changing
predominantly due to the efficiencies that can be achieved by leveraging shared networks
and resources so now even physically separated environments are susceptible For example
the bulk power system could be as vulnerable to digital threats as IT systems but with far
more critical implications as the recent Stuxnet virus has shown Disabling or turning
systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial
control system software can be changed and data can be stolen without intrusions even
being detected These injection vectors serve as a blueprint for future attackers who wish to
access controllers safety systems and protection devices to insert malicious code targeting
changes to set points and switches as well as alteration or suppression of measurements
Standing Committee Coordination Group Roster
Reliability Issues Coordinated Action Plan
June 2011
15
SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr
Position
Name Title
Company City StateProvince
Phone E-mail
CCC Chair W Clay Smith
2100 East Exchange Place Tucker Georgia 30084-5336
(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom
CCC Vice Chair Terry L Bilke
Director Standards and Compliance
Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202
317 249-5463 317 249-5358 Fax tbilkemidwestisoorg
CCC Vice Chair Brett Hallborg
Manager of Operations Training
BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2
(604) 455-1778 bretthallborgbchydroc
om
CIPC Chair Barry Lawson
Manager Power Delivery
National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203
(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo
p
CIPC Vice Chair Cyber
Charles F Abell PE Supervising Engineer
Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103
(314) 554-3817 (314) 206-0046 Fx cfabellamerencom
CIPC Vice Chair Physical Security
Robert D Canada Business Assurance Principal
Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308
(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom
OC Chair JS Holeman
Director System Operations
Duke Energy
(704) 382-0011 SamHolemanduke-energycom
Action Plan
Reliability Issues Coordinated Action Plan June 2011 16
Position
Name Title
Company City StateProvince
Phone E-mail
OC Vice Chair Tom Bowe
Executive Director of Compliance
PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403
610-666-4776 (610) 666-4287 Fx bowetpjmcom
PC Chair Tom Burgess
Director FERC Compliance
FirstEnergy Corp
330-384-5225 burgesstfirstenergycorpcom
PC Vice Chair Jeffrey L Mitchell
Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333
(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg
PCGC Chair Jacob Burger
Transmission System Control Coordinator
Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832
(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom
SC Chair Allen Mosher
Senior Director of Policy Analysis and Reliability
American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715
(202) 467-2944 (202) 467-2992 Fx amosherappanetorg
SC Vice Chair PS (Ben) Li
President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6
(647) 388-1498 (905) 887-2235 Fx benbenlica
REMG Representative
Edward A Schwerdt President and CEO
Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703
(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg
NERC Staff Roster
Reliability Issues Coordinated Action Plan
June 2011
17
NNEERRCC SSttaaffff RRoosstteerr
Position
Name Title
PhoneE-mail
NERC Staff Alvin J (AJ) Connor
Manager of Power System Analysis (609) 751-2579 ajconnornercnet
NERC Staff Tom Galloway
Senior Vice President and Chief Reliability Officer
(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet
NERC Staff Brian M Harrell
Manager of CIP Standards Training and Awareness
(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet
NERC Staff Larry J Kezele
Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet
NERC Staff Mark G Lauby
Vice President and Director of Reliability Assessment and Performance Analysis
(609) 452-8060 (609) 452-9550 Fax marklaubynercnet
NERC Staff Maureen E Long
Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet
NERC Staff Scott R Mix
CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet
NERC Staff Michael Moon
Director of Compliance Operations
(404) 446-2560 michaelmoonnercnet
NERC Staff Andrew Rodriquez Director of Standards Development
(404) 446-2560 andyrodriqueznercnet
NERC Staff Peter Knoetgen Director of Training and Accreditation
404-446-9688 peterknoetgennercnet
NERC Staff Herb Schrayshuen
Vice President and Director of Standards
((315) 439-1390 herbschrayshuennercnet
NERC Staff Mark Weatherford
Vice President and Chief Security Officer
(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet
Introduction
Reliability Issues Coordinated Action Plan June 2011 2
Roles ndash Reliability Issues Coordinated Action Plan
Since these reliability issues can functionally cross multiple committees coordination is
essential to the successful implementation of the Reliability Issues Coordinated Action Plan The
standing committees and NERC Staff have formulated a coordinated approach to ensure
effectiveness in implementation Figure 1 below provides the roles coordination points and
responsibilities of this coordination effort to support this Reliability Issues Coordinated Action
Plan
Figure 1 Roles ndash Reliability Issues Coordinated Action Plan
Introduction
Reliability Issues Coordinated Action Plan June 2011 3
Next Steps
Once lead standing committees are identified for each of the reliability issues and through
their usual processes they will then direct the appropriate sub-groups review and refine their
respective scopes and consider the needed resources deliverables and milestones In many
instances a subgroup is already in place working on one or more of these reliability issues If
no appropriate subgroup exists the standing committees will develop a draft scope and form a
subgroup to address the reliability issue Figure 2 below describes the work plan development
and implementation process
Figure 2 Work Plan Development and Implementation Process
Lead Standing Committee Identified
Develop Action Plan seek approval from Standing Committees and BOT
Direct appropriate Subgroup to Address Reliability Issue
Deliver on Milestones in Plan
Organization
Reliability Issues Coordinated Action Plan June 2011 4
OOrrggaanniizzaattiioonn
The Electric Reliability Organization (ERO) Strategic Goals through 2015 are summarized in the following key goals2
Goal 1 The ERO will have clear results-based reliability standards that provide for an
adequate level of bulk power system reliability
Goal 2 Bulk power system owners operators and users will demonstrate sustained
cultures of learning and reliability excellence built upon underlying foundations
of compliance and effective risk management and mitigation
Goal 3 The ERO will develop and maintain effective reliability performance measures
and will continue to develop high quality reliability assessments based on long
range and seasonal forecasts as well as emerging issues
Goal 4 Bulk power system owners operators and users will effectively manage risks
from cyber and physical attacks and other high-impact low-frequency events
Goal 5 The ERO will balance the role of being a strong independent enforcement
authority with one of providing owners operators and users timely and
transparent feedback on compliance and effective incentives for improving
reliability
Goal 6 NERC and the regional entities will execute statutory functions in a collaborative
enterprise and thereby achieve efficiencies and effective process controls while
leveraging the expertise of staff and reliability stakeholder resources
Goal 7 The ERO will maintain an exceptional reputation as the trusted leader of the
reliability community and instill a high degree of confidence in the reliability of
the bulk power system
Based on NERCrsquos Strategic Plan and the top priority Issues for bulk power system
reliability the standing committeersquos leadership and NERC staff have assigned lead
committees for each reliability issue and formulated deliverables priorities and
milestones (see Table 1)
2 February 17 2011 Board of Trustees agenda item 7 Electric Reliability Organization Strategic Goals through 2015 httpwwwnerccomdocsdocsbotBOT-0211a-completepdf
Organization
Reliability Issues Coordinated Action Plan June 2011 5
Table 1 Proposed LeadSupport NERC Staff and Standing Committees
Top Priority Issues
NERC Lead
Standing Committee Lead NERC Support
Standing Committee Support
1 M
iso
pe
rati
on
s o
f re
lay
pro
tect
ion
and
co
ntr
ol s
yste
ms
Long
Rodriquez
Connor
Cummings
Bian
Standards Committee
Standard Drafting Teams (SDTs) o Protection System Maintenance o Coordination of Protection
Systems o Generator Verification o Protection System
Misoperations
Planning Committee
System Protection amp Control Subcommittee
Reliability Metrics Working Group
Kezele
Moon
Operating Committee
Compliance and Certification Committee
2 H
um
an e
rro
rs b
y
fie
ld p
ers
on
ne
l
Galloway
Kezele
Operating Committee
Personnel Subcommittee
Long Rodriquez
Connor
Moon
Standards Committee
Reliability Coordination SDT
Operations Communications Protocols SDT
Planning Committee
Compliance and Certification Committee
3 A
mb
igu
ou
s o
r
inco
mp
lete
vo
ice
com
mu
nic
atio
n Galloway
Kezele
Operating Committee
Long Rodriquez
Connor
Moon
Standards Committee
Reliability Coordination SDT
Operations Communications Protocols SDT
Planning Committee
Compliance and Certification Committee
4 R
igh
t-o
f-w
ay
mai
nte
nan
ce Kezele
Carter Operating Committee Connor
Moon
Long Rodriquez
Planning Committee
Compliance and Certification Committee
Standards Committee
Vegetation Management SDT
5 C
han
gin
g
reso
urc
e m
ix
Connor Moura Moura
Moura
Planning Committee
Reliability Assessment Subcommittee
Integration of Variable Generation Task Force
Smart Grid Task Force
Kezele
Moon
Connor Moura
Bian Moura
Operating Committee
Compliance and Certification Committee
Planning Committee
Demand Response Data Task Force
TADSGADS
Smart Grid Task Force
Organization
Reliability Issues Coordinated Action Plan June 2011 6
Top Priority Issues
NERC Lead
Standing Committee Lead NERC Support
Standing Committee Support
6 I
nte
grat
ion
of
ne
w
tech
no
logi
es
Connor Moura Moura
Planning Committee
Smart Grid Task Force
Reliability Assessment Subcommittee
Mix
Moon
Kezele
Critical Infrastructure Protection Committee
Compliance and Certification Committee
Operating Committee
7 P
rep
are
dn
ess
fo
r h
igh
imp
act
low
fre
qu
en
cy e
ven
ts
Connor Bian
Moura
Kezele Kezele
Mix
Roxey
Planning Committee
Spare Equipment Database Task Force
Geomagnetic Disturbance Task Force
Operating Committee
Severe Impact Resilience Task Force
Critical Infrastructure Protection Committee
Cyber Attack Task Force
Moon Compliance and Certification Committee
8 N
on
-tra
dit
ion
al
thre
ats
via
cyb
er-
secu
rity
vuln
era
bili
tie
s
Mix Critical Infrastructure Protection Committee
Connor Moura
Kezele
Moon
Planning Committee
Smart Grid Task Force
Operating Committee
Compliance and Certification Committee
Action Plan
Reliability Issues Coordinated Action Plan
June 2011
7
AAccttiioonn PPllaann
The following Action Plan (Table 2) provides Proposed Enhancements Abstract of activity priorities key deliverables and projected milestones
Table 2 Reliability Issues Action Plan
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
1
Mis
op
erat
ion
s o
f re
lay
pro
tect
ion
an
d c
on
tro
l sys
tem
s
Standards Committee
NERC Reliability Standards
Prepare and achieve approval Reliability Standards that minimize relay control system misoperations
High 1 PRC-005 Protection System
Maintenance 2 PRC-004 Protection System Misoperation
Identification and Correction (Rapid Development Pilot)
3 PRC-024 Generator Performance During Frequency and Voltage Excursions
4 PRC-019 Coordination of Generator Voltage Regulator Controls with Unit Capabilities and Protection
5 PRC-001 Protection System Coordination
1 BOT eta Q3 2011 2 BOT eta Q2 2012 3 BOT eta Q2 2012
4 BOT eta Q4 2012
5 BOT eta Q1 2013
Planning Committee System Protection amp Control Subcommittee
Reliability Metrics Working Group
Provide tools for improvement and measure trends
Enhancing the available tools to planners and operators and measuring trends will support industry efforts to improve
High
1 Guidance for relay maintenance and adequacy of protection engineering
2 Metrics that measure relaycontrol system misoperation
1 SPCS deliver Guide Q2 2012
2 RMWG develops metrics Q4 2011 TADSWG collects data as needed
Low 3 Address ways to enhance operator trainingrelay knowledge
3 SPCS in collaboration with the OCrsquos Personnel Subcommittee deliver tutorial for OC review Q4 2013
2
Hu
man
er
rors
by
fiel
d
per
son
nel
Operating Committee Personnel Subcommittee
Developing root causes lessons learned and guidance on processes can shape industry improvement opportunities
Enhancing industry knowledge of failure modes can improve reliability Standard development on operator training can help ensure successful implementation of recommendations
High 1 Develop guidance for root cause aspects
ndash including planningmanagement decisions
2 Develop refined cause codes to capture root cause
3 Develop processes that lead to quicker sharing of lessons learned
4 Develop guidance on tools development (man‐machine interfacedesign)
1 EAWG develop root cause guidebook by Q4 2012
2 EAWG to develop cause codes by Q4 2013
3 EAWG to streamline lessons learned process by Q4 2011
4 RCWG to create tools development guidebook Q4 2014
Action Plan
Reliability Issues Coordinated Action Plan June 2011 8
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
Medium 5 Develop process guidance for task design
(process resolutions plan the work and work the plan)
6 Support Personnel Training Standard
5 Personnel Subcommittee to prioritize and develop task design guidance Q3 2012
6 Personnel Subcommittee to develop SAR by Q4 2012
3
Am
big
uo
us
or
inco
mp
lete
vo
ice
com
mu
nic
atio
n
Standards Committee NERC Reliability Standards
Prepare and approve Reliability Standards that address communications
High 1 COM-002-3 ndash Communications and
Coordination Standard 2 COM-003-1 ndash Operating Personnel
Communications Protocols Standard
1 BOT eta Q1 2012
2 BOT eta Q4 2012
Operating Committee
Measurably improved communications in system operations
Provide guidance clarifying for operators the role of communications in improvement of reliability Should be a subset of 2 (good practices training deliverables etc)
Medium 1 Use other industries for guidance 2 Provide guidance on the benefits of using
of standard operating language or good practices separate from three-part communications Clarify for operators when communications are mission critical and when prescriptive forms impede reliability
3 Provide clear interpretations of the relevant reliability standards so that there is certainty for directives and associated communication actions
1 RCWG investigates and documents other industryrsquos experience and use of communications Report Q4 2012
2 RCWG develops guidelines on benefits from standard communication approaches Detail the use of communications to improve while not reducing reliability Q3 2013
3 Operating Committee works with NERCrsquos Compliance Operations on Compliance Application Notices (CAN) to eliminate ambiguous terms used in operations Q2 2012
4
Rig
ht-
of-
way
m
ain
ten
ance
Operating Committee (Primary Technical Committee ndash not determined)
Measurably improved right-of-way maintenance
Ensure that ROW maintenance practices result incompliance with FAC-003-2 requirements thereby maintaining reliability
High 1 Document actions undertaken that
address the facility ratings Alert results Leverage the North American Transmission Forum work for planning calculationsratings
2 Provide guidance for operational coordination among operating units TOPs RCs and BAs for different situations
1 Subgroup formed in collaboration with NERC and the Regional Entities along with the North American Transmission forum to document the result of the FAC-003-2 plans to develop industry guidance and action Q4 2011
2 Subgroup should develop guidelines for coordination among TOPs RCs and BAs Q4 2012
Action Plan
Reliability Issues Coordinated Action Plan June 2011 9
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
Standards Committee NERC Reliability Standards
Prepare and achieve approval of Reliability Standard for Transmission Vegetation Management
Low 1 FAC-003-2 ndash Transmission Vegetation
Management 1 BOT eta Q3 2011
5
Ch
angi
ng
reso
urc
e m
ix
Planning Committee
Reliability Assessment Subcommittee
Integration of Variable Generation Task Force
Smart Grid Task Force
Ready industry for the changing resource mix and technology integration by providing guidance and input into NERCrsquos Reliability Standards
Unprecedented change in resource mix being realized through retirement of aging units capital fuel costs along with environmental regulations This change along with technological advances in communications and control can change the well understood character of the bulk power system requiring changes in the planning approaches to ensure operational reliability
Medium 1 IVGTF ndash addressing frequency voltage
response resource flexibility contingency reserves
2 SGTF ndash addressing reliability impacts 3 RIS-RAS - addressing scenarios resource
mix planning probabilistic assessments 4 Scenarios that address resource mix
implications such as natural gas interdependence
5 Evaluate benefit of probabilistic metrics and provide guidance to plannersoperators
6 Develop targetsmetricsrefinements for planningoperation
7 Provide guidance on tools for operators 8 Develop potential standards proposals
or guidanceadvisories that enhance reliability
9 Provide recommendations for expanded planning assessments to address resource mix changes
1 through 13 See Planning Committeersquos Strategic Plan
3
and Action Plan4
3 through 6 Resource Issues and Reliability Assessment Subcommittees
Annual Summer Reliability Assessment
Annual Winter Reliability Assessment
Annual Long-Term Reliability Assessment o Scenarios o Emerging Issues o Probabilistic
3 httpwwwnerccomdocspcAgendaItem_5a_PC_2011-2016_Strategic_Plan_v5_LINKpdf
4 httpwwwnerccomdocspcAgendaItem_5ai_PC_Strategic_Plan_Next20Steps2020Future20Work20Plan_v5_LINKpdf
Action Plan
Reliability Issues Coordinated Action Plan June 2011 10
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
6
Inte
grat
ion
of
new
te
chn
olo
gies
Planning Committee
Smart Grid Task Force
Reliability Assessment Subcommittee
10 Smart Grid impacts from distribution
systems (Address cyber aspects in 8 Non-Traditional Threats via Cyber-Security Vulnerabilities)
11 IVGTF dealing with distribution (renewables EV and conventional) resource integration
12 DRDTF addressing high levels of demand response integration
13 TIS and SPCS will provide guidance for modeling and controls systems managementcoordination
Assessment
7
Pre
par
edn
ess
for
hig
h
imp
act
low
fre
qu
ency
ev
ents
Planning Committee
Spare Equipment Database Task Force
Geomagnetic Disturbance Task Force
Operating Committee
Severe Impact Resilience Task Force
Critical Infrastructure Protection Committee
Cyber Attack Task Force
Address the risks from selected high impact low frequency events which can have unacceptable consequences on bulk power system reliability
The bulk power system has significant amounts of built-in resiliency However it has been planned and operated with the known risks to successfully manage system performance With changing threats from cyber physical and new facts about GMD industry will adjust their planning and operational activities to address these evolving risks
High 1 The Electricity Subsector Coordinating
Council has developed a BOT approved Critical Infrastructure Strategic Roadmap
5 in Q4 2010
2 The technical Committees have developed a Critical Infrastructure Strategic Initiatives Coordinated Action Plan
6 BOT approved in Q4 2010
1-2 Covered in the technical committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan
5 httpwwwnerccomdocsesccESCC_Critical_Infrastructure_Strategic_Roadmappdf
6 httpwwwnerccomdocsciscapCritical_Infrastructure_Strategic_Initiatives_Coordinated_Action_Plan_BOT_Apprd_11-2010pdf
Action Plan
Reliability Issues Coordinated Action Plan June 2011 11
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
8
No
n-t
rad
itio
nal
th
reat
s vi
a cy
ber
-se
curi
ty
vuln
erab
iliti
es
Critical Infrastructure Protection Committee
A resilient system fortified by industry planning and operational practices
The continuously evolving threat from cyber-security vulnerabilities requires new processes and procedures both for system planning and operations Industry awareness and cooperation with governmental jurisdictions are key aspects for this improved situational awareness
High
1 Also part of the deliverables in item 7 Preparedness for High Impact Low Frequency events
2 Metric development to measure cyber strength being developed with the Planning Committeersquos Smart Grid Task Force (SGTF)
3 Ongoing industry Alerts as required 4 Guidelines required to advise industry on
the establishment of appropriate cyber-security programs in their organizations
1 Covered in the technical
committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan
2 See Planning Committeersquos Strategic Plan and Action Plan along with the work plan for the SGTF
7
3 See NERCrsquos Alert website8
4 A subgroup formed to develop guidelines reviewing other industryrsquos to take advantage of existing knowledge 2012 Q4
7 httpwwwnerccomfilesSGTF_Report_Final_posted_v11pdf
8 httpwwwnerccompagephpcid=5|63
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
12
AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess
Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the
following list and abstract description was developed
1 Misoperations of relay protection and control systems ndash Nearly all major system failures
excluding perhaps those caused by severe weather have misoperations of relays or
automatic controls as a factor contributing to the propagation of the failure Protection
systems are designed to operate reliably when needed under the presence of a fault on the
system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without
allowing the fault to transfer into adjoining facilities The greater the number of facilities
involved in an event the more severe the impact to the rest of the bulk power system with
cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout
being the extreme Relays can misoperate either operate when not needed or fail to
operate when needed for a number of reasons First the device could experience an
internal failure ndash but this is rare Most commonly relays fail to operate correctly due to
incorrect settings improper coordination (of timing and set points) with other devices
ineffective maintenance and testing or failure of communications channels or power
supplies Preventable errors can be introduced by field personnel and their supervisors or
more programmatically by the organization Adding to the risk is that system protection is
an extremely complex engineering field ndashthere are many practitioners but few masters
2 Human errors by field personnel ndash Field personnel play an important role in the
maintenance and operation of the bulk power system They often are switching equipment
in and out of service and aligning alternative configurations Risks can be introduced when
field personnel operate equipment in a manner that reduces the redundancy of the bulk
power system sometimes even creating single points of failure that would not exist
normally Taking outages of equipment to conduct maintenance is a routine and necessary
part of reliable bulk power system operation However any alterations to the configuration
of the network must be carefully planned in advance to minimize loss of redundancy and
avoid unintended single points of failure It is also important that such changes and risks be
communicated to system operators and reliability coordinators in advance so that they can
make adjustments in their operating plans and reliability assessments
3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system
operators and reliability coordinators are comfortable with informal communications with
field and power plant personnel and neighboring systems Experience from analyzing
various events indicates there is often a sense of awkwardness when personnel transition
from conversational discussion to issuing reliability instructions It is also human nature to
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
13
be uncomfortable in applying formal communication procedures after personnel have
developed informal styles over many years Confusion in making the transition from normal
conversation to formal communications can introduce misunderstandings and possibly even
incorrect actions or assumptions Further once the need to transition to more formal
structure is recognized the transition is often not complete or effective Results can include
unclear instructions confusion whether an instruction is a suggestion or a directive whether
specific action is required or a set of alternative actions are permissible and confusion over
what elements of the system are being addressed
4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation
management programs as a key recommendation for avoiding future cascading failures
More broadly any encroachments in the right-of-way that reduce clearances to the point of
lowering facility ratings or reducing the randomness of possible contacts can be a risk to
reliability Although these impacts may not always be readily apparent under extreme wind
and temperature conditions they may become more of a risk to bulk power system
reliability There are many challenges to effective right-of-way maintenance especially
maintaining proper clearances including interventions by private landowners local
municipalities and federal and state landowners
5 Changing resource mix ndash Energy and environmental policies along with energy markets are
driving proposals toward unprecedented changes in the resource mix of the bulk power
system Examples include integration of significant amounts of renewable (variable such as
wind and solar) natural gas storage and demand resources to provide energy and capacity
Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a
century of operational experience with the existing resource mix However integration of
these new resources results in operating characteristics significantly different from
conventional steam production facilities An array of reliability services must be provided
over a range of time horizons from seconds to minutes to hours and days and annually such
as load following contingency reserves frequency response reactive supply capacity and
voltage control and power system stability Continued reliable operation of the bulk power
system will require an industry dialog with policymakers and regulators Understanding the
impacts on reliability will depend on accurate modeling of new resources and development
of new methods and tools for the provision of essential reliability services
6 Integration of new technologies ndash Introduction of electric vehicles demand-side
management variable generation distributed resources and smart grid technologies
presents tremendous opportunities but also introduces changes to the operating
characteristics of the bulk power system Integration of these new technologies requires
changes in the way the bulk power system is planned and operated to maintain reliability
Further additional toolsmodels are required to support their integration to meet policy and
strategic goals Without these changes it will be challenging to maintain reliability with
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
14
large-scale deployments For example some smart grid devicessystems increase exposure
to cyber threats while variable generation requires additional ancillary services Integration
of these new technologies must be achieved in a manner that does not undermine existing
levels of stability resilience and security of the bulk power system
7 Preparedness for high impact low frequency events ndash Although there is a wide range of
threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for
possible events that could debilitate the bulk power system for extended periods such as
widespread coordinated physicalcyber attacks or geomagnetic storms The industry must
consider improving the design of the bulk power system to address these potential risks and
prepare coordinated North American response plans for use during catastrophic events and
be ready to deploy those plans to restore essential services in a timely manner
8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-
based programs policies and processes to prepare for react to and recover from cyber
security vulnerabilities is a high priority for the industry The bulk power system has not yet
experienced wide-spread cyber-attacks and a contributing factor has been the traditional
physical separation between the industrial control systemSCADA environment and the
business and administrative networks This situation however is rapidly changing
predominantly due to the efficiencies that can be achieved by leveraging shared networks
and resources so now even physically separated environments are susceptible For example
the bulk power system could be as vulnerable to digital threats as IT systems but with far
more critical implications as the recent Stuxnet virus has shown Disabling or turning
systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial
control system software can be changed and data can be stolen without intrusions even
being detected These injection vectors serve as a blueprint for future attackers who wish to
access controllers safety systems and protection devices to insert malicious code targeting
changes to set points and switches as well as alteration or suppression of measurements
Standing Committee Coordination Group Roster
Reliability Issues Coordinated Action Plan
June 2011
15
SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr
Position
Name Title
Company City StateProvince
Phone E-mail
CCC Chair W Clay Smith
2100 East Exchange Place Tucker Georgia 30084-5336
(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom
CCC Vice Chair Terry L Bilke
Director Standards and Compliance
Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202
317 249-5463 317 249-5358 Fax tbilkemidwestisoorg
CCC Vice Chair Brett Hallborg
Manager of Operations Training
BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2
(604) 455-1778 bretthallborgbchydroc
om
CIPC Chair Barry Lawson
Manager Power Delivery
National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203
(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo
p
CIPC Vice Chair Cyber
Charles F Abell PE Supervising Engineer
Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103
(314) 554-3817 (314) 206-0046 Fx cfabellamerencom
CIPC Vice Chair Physical Security
Robert D Canada Business Assurance Principal
Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308
(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom
OC Chair JS Holeman
Director System Operations
Duke Energy
(704) 382-0011 SamHolemanduke-energycom
Action Plan
Reliability Issues Coordinated Action Plan June 2011 16
Position
Name Title
Company City StateProvince
Phone E-mail
OC Vice Chair Tom Bowe
Executive Director of Compliance
PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403
610-666-4776 (610) 666-4287 Fx bowetpjmcom
PC Chair Tom Burgess
Director FERC Compliance
FirstEnergy Corp
330-384-5225 burgesstfirstenergycorpcom
PC Vice Chair Jeffrey L Mitchell
Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333
(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg
PCGC Chair Jacob Burger
Transmission System Control Coordinator
Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832
(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom
SC Chair Allen Mosher
Senior Director of Policy Analysis and Reliability
American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715
(202) 467-2944 (202) 467-2992 Fx amosherappanetorg
SC Vice Chair PS (Ben) Li
President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6
(647) 388-1498 (905) 887-2235 Fx benbenlica
REMG Representative
Edward A Schwerdt President and CEO
Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703
(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg
NERC Staff Roster
Reliability Issues Coordinated Action Plan
June 2011
17
NNEERRCC SSttaaffff RRoosstteerr
Position
Name Title
PhoneE-mail
NERC Staff Alvin J (AJ) Connor
Manager of Power System Analysis (609) 751-2579 ajconnornercnet
NERC Staff Tom Galloway
Senior Vice President and Chief Reliability Officer
(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet
NERC Staff Brian M Harrell
Manager of CIP Standards Training and Awareness
(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet
NERC Staff Larry J Kezele
Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet
NERC Staff Mark G Lauby
Vice President and Director of Reliability Assessment and Performance Analysis
(609) 452-8060 (609) 452-9550 Fax marklaubynercnet
NERC Staff Maureen E Long
Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet
NERC Staff Scott R Mix
CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet
NERC Staff Michael Moon
Director of Compliance Operations
(404) 446-2560 michaelmoonnercnet
NERC Staff Andrew Rodriquez Director of Standards Development
(404) 446-2560 andyrodriqueznercnet
NERC Staff Peter Knoetgen Director of Training and Accreditation
404-446-9688 peterknoetgennercnet
NERC Staff Herb Schrayshuen
Vice President and Director of Standards
((315) 439-1390 herbschrayshuennercnet
NERC Staff Mark Weatherford
Vice President and Chief Security Officer
(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet
Introduction
Reliability Issues Coordinated Action Plan June 2011 3
Next Steps
Once lead standing committees are identified for each of the reliability issues and through
their usual processes they will then direct the appropriate sub-groups review and refine their
respective scopes and consider the needed resources deliverables and milestones In many
instances a subgroup is already in place working on one or more of these reliability issues If
no appropriate subgroup exists the standing committees will develop a draft scope and form a
subgroup to address the reliability issue Figure 2 below describes the work plan development
and implementation process
Figure 2 Work Plan Development and Implementation Process
Lead Standing Committee Identified
Develop Action Plan seek approval from Standing Committees and BOT
Direct appropriate Subgroup to Address Reliability Issue
Deliver on Milestones in Plan
Organization
Reliability Issues Coordinated Action Plan June 2011 4
OOrrggaanniizzaattiioonn
The Electric Reliability Organization (ERO) Strategic Goals through 2015 are summarized in the following key goals2
Goal 1 The ERO will have clear results-based reliability standards that provide for an
adequate level of bulk power system reliability
Goal 2 Bulk power system owners operators and users will demonstrate sustained
cultures of learning and reliability excellence built upon underlying foundations
of compliance and effective risk management and mitigation
Goal 3 The ERO will develop and maintain effective reliability performance measures
and will continue to develop high quality reliability assessments based on long
range and seasonal forecasts as well as emerging issues
Goal 4 Bulk power system owners operators and users will effectively manage risks
from cyber and physical attacks and other high-impact low-frequency events
Goal 5 The ERO will balance the role of being a strong independent enforcement
authority with one of providing owners operators and users timely and
transparent feedback on compliance and effective incentives for improving
reliability
Goal 6 NERC and the regional entities will execute statutory functions in a collaborative
enterprise and thereby achieve efficiencies and effective process controls while
leveraging the expertise of staff and reliability stakeholder resources
Goal 7 The ERO will maintain an exceptional reputation as the trusted leader of the
reliability community and instill a high degree of confidence in the reliability of
the bulk power system
Based on NERCrsquos Strategic Plan and the top priority Issues for bulk power system
reliability the standing committeersquos leadership and NERC staff have assigned lead
committees for each reliability issue and formulated deliverables priorities and
milestones (see Table 1)
2 February 17 2011 Board of Trustees agenda item 7 Electric Reliability Organization Strategic Goals through 2015 httpwwwnerccomdocsdocsbotBOT-0211a-completepdf
Organization
Reliability Issues Coordinated Action Plan June 2011 5
Table 1 Proposed LeadSupport NERC Staff and Standing Committees
Top Priority Issues
NERC Lead
Standing Committee Lead NERC Support
Standing Committee Support
1 M
iso
pe
rati
on
s o
f re
lay
pro
tect
ion
and
co
ntr
ol s
yste
ms
Long
Rodriquez
Connor
Cummings
Bian
Standards Committee
Standard Drafting Teams (SDTs) o Protection System Maintenance o Coordination of Protection
Systems o Generator Verification o Protection System
Misoperations
Planning Committee
System Protection amp Control Subcommittee
Reliability Metrics Working Group
Kezele
Moon
Operating Committee
Compliance and Certification Committee
2 H
um
an e
rro
rs b
y
fie
ld p
ers
on
ne
l
Galloway
Kezele
Operating Committee
Personnel Subcommittee
Long Rodriquez
Connor
Moon
Standards Committee
Reliability Coordination SDT
Operations Communications Protocols SDT
Planning Committee
Compliance and Certification Committee
3 A
mb
igu
ou
s o
r
inco
mp
lete
vo
ice
com
mu
nic
atio
n Galloway
Kezele
Operating Committee
Long Rodriquez
Connor
Moon
Standards Committee
Reliability Coordination SDT
Operations Communications Protocols SDT
Planning Committee
Compliance and Certification Committee
4 R
igh
t-o
f-w
ay
mai
nte
nan
ce Kezele
Carter Operating Committee Connor
Moon
Long Rodriquez
Planning Committee
Compliance and Certification Committee
Standards Committee
Vegetation Management SDT
5 C
han
gin
g
reso
urc
e m
ix
Connor Moura Moura
Moura
Planning Committee
Reliability Assessment Subcommittee
Integration of Variable Generation Task Force
Smart Grid Task Force
Kezele
Moon
Connor Moura
Bian Moura
Operating Committee
Compliance and Certification Committee
Planning Committee
Demand Response Data Task Force
TADSGADS
Smart Grid Task Force
Organization
Reliability Issues Coordinated Action Plan June 2011 6
Top Priority Issues
NERC Lead
Standing Committee Lead NERC Support
Standing Committee Support
6 I
nte
grat
ion
of
ne
w
tech
no
logi
es
Connor Moura Moura
Planning Committee
Smart Grid Task Force
Reliability Assessment Subcommittee
Mix
Moon
Kezele
Critical Infrastructure Protection Committee
Compliance and Certification Committee
Operating Committee
7 P
rep
are
dn
ess
fo
r h
igh
imp
act
low
fre
qu
en
cy e
ven
ts
Connor Bian
Moura
Kezele Kezele
Mix
Roxey
Planning Committee
Spare Equipment Database Task Force
Geomagnetic Disturbance Task Force
Operating Committee
Severe Impact Resilience Task Force
Critical Infrastructure Protection Committee
Cyber Attack Task Force
Moon Compliance and Certification Committee
8 N
on
-tra
dit
ion
al
thre
ats
via
cyb
er-
secu
rity
vuln
era
bili
tie
s
Mix Critical Infrastructure Protection Committee
Connor Moura
Kezele
Moon
Planning Committee
Smart Grid Task Force
Operating Committee
Compliance and Certification Committee
Action Plan
Reliability Issues Coordinated Action Plan
June 2011
7
AAccttiioonn PPllaann
The following Action Plan (Table 2) provides Proposed Enhancements Abstract of activity priorities key deliverables and projected milestones
Table 2 Reliability Issues Action Plan
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
1
Mis
op
erat
ion
s o
f re
lay
pro
tect
ion
an
d c
on
tro
l sys
tem
s
Standards Committee
NERC Reliability Standards
Prepare and achieve approval Reliability Standards that minimize relay control system misoperations
High 1 PRC-005 Protection System
Maintenance 2 PRC-004 Protection System Misoperation
Identification and Correction (Rapid Development Pilot)
3 PRC-024 Generator Performance During Frequency and Voltage Excursions
4 PRC-019 Coordination of Generator Voltage Regulator Controls with Unit Capabilities and Protection
5 PRC-001 Protection System Coordination
1 BOT eta Q3 2011 2 BOT eta Q2 2012 3 BOT eta Q2 2012
4 BOT eta Q4 2012
5 BOT eta Q1 2013
Planning Committee System Protection amp Control Subcommittee
Reliability Metrics Working Group
Provide tools for improvement and measure trends
Enhancing the available tools to planners and operators and measuring trends will support industry efforts to improve
High
1 Guidance for relay maintenance and adequacy of protection engineering
2 Metrics that measure relaycontrol system misoperation
1 SPCS deliver Guide Q2 2012
2 RMWG develops metrics Q4 2011 TADSWG collects data as needed
Low 3 Address ways to enhance operator trainingrelay knowledge
3 SPCS in collaboration with the OCrsquos Personnel Subcommittee deliver tutorial for OC review Q4 2013
2
Hu
man
er
rors
by
fiel
d
per
son
nel
Operating Committee Personnel Subcommittee
Developing root causes lessons learned and guidance on processes can shape industry improvement opportunities
Enhancing industry knowledge of failure modes can improve reliability Standard development on operator training can help ensure successful implementation of recommendations
High 1 Develop guidance for root cause aspects
ndash including planningmanagement decisions
2 Develop refined cause codes to capture root cause
3 Develop processes that lead to quicker sharing of lessons learned
4 Develop guidance on tools development (man‐machine interfacedesign)
1 EAWG develop root cause guidebook by Q4 2012
2 EAWG to develop cause codes by Q4 2013
3 EAWG to streamline lessons learned process by Q4 2011
4 RCWG to create tools development guidebook Q4 2014
Action Plan
Reliability Issues Coordinated Action Plan June 2011 8
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
Medium 5 Develop process guidance for task design
(process resolutions plan the work and work the plan)
6 Support Personnel Training Standard
5 Personnel Subcommittee to prioritize and develop task design guidance Q3 2012
6 Personnel Subcommittee to develop SAR by Q4 2012
3
Am
big
uo
us
or
inco
mp
lete
vo
ice
com
mu
nic
atio
n
Standards Committee NERC Reliability Standards
Prepare and approve Reliability Standards that address communications
High 1 COM-002-3 ndash Communications and
Coordination Standard 2 COM-003-1 ndash Operating Personnel
Communications Protocols Standard
1 BOT eta Q1 2012
2 BOT eta Q4 2012
Operating Committee
Measurably improved communications in system operations
Provide guidance clarifying for operators the role of communications in improvement of reliability Should be a subset of 2 (good practices training deliverables etc)
Medium 1 Use other industries for guidance 2 Provide guidance on the benefits of using
of standard operating language or good practices separate from three-part communications Clarify for operators when communications are mission critical and when prescriptive forms impede reliability
3 Provide clear interpretations of the relevant reliability standards so that there is certainty for directives and associated communication actions
1 RCWG investigates and documents other industryrsquos experience and use of communications Report Q4 2012
2 RCWG develops guidelines on benefits from standard communication approaches Detail the use of communications to improve while not reducing reliability Q3 2013
3 Operating Committee works with NERCrsquos Compliance Operations on Compliance Application Notices (CAN) to eliminate ambiguous terms used in operations Q2 2012
4
Rig
ht-
of-
way
m
ain
ten
ance
Operating Committee (Primary Technical Committee ndash not determined)
Measurably improved right-of-way maintenance
Ensure that ROW maintenance practices result incompliance with FAC-003-2 requirements thereby maintaining reliability
High 1 Document actions undertaken that
address the facility ratings Alert results Leverage the North American Transmission Forum work for planning calculationsratings
2 Provide guidance for operational coordination among operating units TOPs RCs and BAs for different situations
1 Subgroup formed in collaboration with NERC and the Regional Entities along with the North American Transmission forum to document the result of the FAC-003-2 plans to develop industry guidance and action Q4 2011
2 Subgroup should develop guidelines for coordination among TOPs RCs and BAs Q4 2012
Action Plan
Reliability Issues Coordinated Action Plan June 2011 9
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
Standards Committee NERC Reliability Standards
Prepare and achieve approval of Reliability Standard for Transmission Vegetation Management
Low 1 FAC-003-2 ndash Transmission Vegetation
Management 1 BOT eta Q3 2011
5
Ch
angi
ng
reso
urc
e m
ix
Planning Committee
Reliability Assessment Subcommittee
Integration of Variable Generation Task Force
Smart Grid Task Force
Ready industry for the changing resource mix and technology integration by providing guidance and input into NERCrsquos Reliability Standards
Unprecedented change in resource mix being realized through retirement of aging units capital fuel costs along with environmental regulations This change along with technological advances in communications and control can change the well understood character of the bulk power system requiring changes in the planning approaches to ensure operational reliability
Medium 1 IVGTF ndash addressing frequency voltage
response resource flexibility contingency reserves
2 SGTF ndash addressing reliability impacts 3 RIS-RAS - addressing scenarios resource
mix planning probabilistic assessments 4 Scenarios that address resource mix
implications such as natural gas interdependence
5 Evaluate benefit of probabilistic metrics and provide guidance to plannersoperators
6 Develop targetsmetricsrefinements for planningoperation
7 Provide guidance on tools for operators 8 Develop potential standards proposals
or guidanceadvisories that enhance reliability
9 Provide recommendations for expanded planning assessments to address resource mix changes
1 through 13 See Planning Committeersquos Strategic Plan
3
and Action Plan4
3 through 6 Resource Issues and Reliability Assessment Subcommittees
Annual Summer Reliability Assessment
Annual Winter Reliability Assessment
Annual Long-Term Reliability Assessment o Scenarios o Emerging Issues o Probabilistic
3 httpwwwnerccomdocspcAgendaItem_5a_PC_2011-2016_Strategic_Plan_v5_LINKpdf
4 httpwwwnerccomdocspcAgendaItem_5ai_PC_Strategic_Plan_Next20Steps2020Future20Work20Plan_v5_LINKpdf
Action Plan
Reliability Issues Coordinated Action Plan June 2011 10
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
6
Inte
grat
ion
of
new
te
chn
olo
gies
Planning Committee
Smart Grid Task Force
Reliability Assessment Subcommittee
10 Smart Grid impacts from distribution
systems (Address cyber aspects in 8 Non-Traditional Threats via Cyber-Security Vulnerabilities)
11 IVGTF dealing with distribution (renewables EV and conventional) resource integration
12 DRDTF addressing high levels of demand response integration
13 TIS and SPCS will provide guidance for modeling and controls systems managementcoordination
Assessment
7
Pre
par
edn
ess
for
hig
h
imp
act
low
fre
qu
ency
ev
ents
Planning Committee
Spare Equipment Database Task Force
Geomagnetic Disturbance Task Force
Operating Committee
Severe Impact Resilience Task Force
Critical Infrastructure Protection Committee
Cyber Attack Task Force
Address the risks from selected high impact low frequency events which can have unacceptable consequences on bulk power system reliability
The bulk power system has significant amounts of built-in resiliency However it has been planned and operated with the known risks to successfully manage system performance With changing threats from cyber physical and new facts about GMD industry will adjust their planning and operational activities to address these evolving risks
High 1 The Electricity Subsector Coordinating
Council has developed a BOT approved Critical Infrastructure Strategic Roadmap
5 in Q4 2010
2 The technical Committees have developed a Critical Infrastructure Strategic Initiatives Coordinated Action Plan
6 BOT approved in Q4 2010
1-2 Covered in the technical committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan
5 httpwwwnerccomdocsesccESCC_Critical_Infrastructure_Strategic_Roadmappdf
6 httpwwwnerccomdocsciscapCritical_Infrastructure_Strategic_Initiatives_Coordinated_Action_Plan_BOT_Apprd_11-2010pdf
Action Plan
Reliability Issues Coordinated Action Plan June 2011 11
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
8
No
n-t
rad
itio
nal
th
reat
s vi
a cy
ber
-se
curi
ty
vuln
erab
iliti
es
Critical Infrastructure Protection Committee
A resilient system fortified by industry planning and operational practices
The continuously evolving threat from cyber-security vulnerabilities requires new processes and procedures both for system planning and operations Industry awareness and cooperation with governmental jurisdictions are key aspects for this improved situational awareness
High
1 Also part of the deliverables in item 7 Preparedness for High Impact Low Frequency events
2 Metric development to measure cyber strength being developed with the Planning Committeersquos Smart Grid Task Force (SGTF)
3 Ongoing industry Alerts as required 4 Guidelines required to advise industry on
the establishment of appropriate cyber-security programs in their organizations
1 Covered in the technical
committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan
2 See Planning Committeersquos Strategic Plan and Action Plan along with the work plan for the SGTF
7
3 See NERCrsquos Alert website8
4 A subgroup formed to develop guidelines reviewing other industryrsquos to take advantage of existing knowledge 2012 Q4
7 httpwwwnerccomfilesSGTF_Report_Final_posted_v11pdf
8 httpwwwnerccompagephpcid=5|63
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
12
AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess
Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the
following list and abstract description was developed
1 Misoperations of relay protection and control systems ndash Nearly all major system failures
excluding perhaps those caused by severe weather have misoperations of relays or
automatic controls as a factor contributing to the propagation of the failure Protection
systems are designed to operate reliably when needed under the presence of a fault on the
system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without
allowing the fault to transfer into adjoining facilities The greater the number of facilities
involved in an event the more severe the impact to the rest of the bulk power system with
cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout
being the extreme Relays can misoperate either operate when not needed or fail to
operate when needed for a number of reasons First the device could experience an
internal failure ndash but this is rare Most commonly relays fail to operate correctly due to
incorrect settings improper coordination (of timing and set points) with other devices
ineffective maintenance and testing or failure of communications channels or power
supplies Preventable errors can be introduced by field personnel and their supervisors or
more programmatically by the organization Adding to the risk is that system protection is
an extremely complex engineering field ndashthere are many practitioners but few masters
2 Human errors by field personnel ndash Field personnel play an important role in the
maintenance and operation of the bulk power system They often are switching equipment
in and out of service and aligning alternative configurations Risks can be introduced when
field personnel operate equipment in a manner that reduces the redundancy of the bulk
power system sometimes even creating single points of failure that would not exist
normally Taking outages of equipment to conduct maintenance is a routine and necessary
part of reliable bulk power system operation However any alterations to the configuration
of the network must be carefully planned in advance to minimize loss of redundancy and
avoid unintended single points of failure It is also important that such changes and risks be
communicated to system operators and reliability coordinators in advance so that they can
make adjustments in their operating plans and reliability assessments
3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system
operators and reliability coordinators are comfortable with informal communications with
field and power plant personnel and neighboring systems Experience from analyzing
various events indicates there is often a sense of awkwardness when personnel transition
from conversational discussion to issuing reliability instructions It is also human nature to
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
13
be uncomfortable in applying formal communication procedures after personnel have
developed informal styles over many years Confusion in making the transition from normal
conversation to formal communications can introduce misunderstandings and possibly even
incorrect actions or assumptions Further once the need to transition to more formal
structure is recognized the transition is often not complete or effective Results can include
unclear instructions confusion whether an instruction is a suggestion or a directive whether
specific action is required or a set of alternative actions are permissible and confusion over
what elements of the system are being addressed
4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation
management programs as a key recommendation for avoiding future cascading failures
More broadly any encroachments in the right-of-way that reduce clearances to the point of
lowering facility ratings or reducing the randomness of possible contacts can be a risk to
reliability Although these impacts may not always be readily apparent under extreme wind
and temperature conditions they may become more of a risk to bulk power system
reliability There are many challenges to effective right-of-way maintenance especially
maintaining proper clearances including interventions by private landowners local
municipalities and federal and state landowners
5 Changing resource mix ndash Energy and environmental policies along with energy markets are
driving proposals toward unprecedented changes in the resource mix of the bulk power
system Examples include integration of significant amounts of renewable (variable such as
wind and solar) natural gas storage and demand resources to provide energy and capacity
Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a
century of operational experience with the existing resource mix However integration of
these new resources results in operating characteristics significantly different from
conventional steam production facilities An array of reliability services must be provided
over a range of time horizons from seconds to minutes to hours and days and annually such
as load following contingency reserves frequency response reactive supply capacity and
voltage control and power system stability Continued reliable operation of the bulk power
system will require an industry dialog with policymakers and regulators Understanding the
impacts on reliability will depend on accurate modeling of new resources and development
of new methods and tools for the provision of essential reliability services
6 Integration of new technologies ndash Introduction of electric vehicles demand-side
management variable generation distributed resources and smart grid technologies
presents tremendous opportunities but also introduces changes to the operating
characteristics of the bulk power system Integration of these new technologies requires
changes in the way the bulk power system is planned and operated to maintain reliability
Further additional toolsmodels are required to support their integration to meet policy and
strategic goals Without these changes it will be challenging to maintain reliability with
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
14
large-scale deployments For example some smart grid devicessystems increase exposure
to cyber threats while variable generation requires additional ancillary services Integration
of these new technologies must be achieved in a manner that does not undermine existing
levels of stability resilience and security of the bulk power system
7 Preparedness for high impact low frequency events ndash Although there is a wide range of
threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for
possible events that could debilitate the bulk power system for extended periods such as
widespread coordinated physicalcyber attacks or geomagnetic storms The industry must
consider improving the design of the bulk power system to address these potential risks and
prepare coordinated North American response plans for use during catastrophic events and
be ready to deploy those plans to restore essential services in a timely manner
8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-
based programs policies and processes to prepare for react to and recover from cyber
security vulnerabilities is a high priority for the industry The bulk power system has not yet
experienced wide-spread cyber-attacks and a contributing factor has been the traditional
physical separation between the industrial control systemSCADA environment and the
business and administrative networks This situation however is rapidly changing
predominantly due to the efficiencies that can be achieved by leveraging shared networks
and resources so now even physically separated environments are susceptible For example
the bulk power system could be as vulnerable to digital threats as IT systems but with far
more critical implications as the recent Stuxnet virus has shown Disabling or turning
systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial
control system software can be changed and data can be stolen without intrusions even
being detected These injection vectors serve as a blueprint for future attackers who wish to
access controllers safety systems and protection devices to insert malicious code targeting
changes to set points and switches as well as alteration or suppression of measurements
Standing Committee Coordination Group Roster
Reliability Issues Coordinated Action Plan
June 2011
15
SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr
Position
Name Title
Company City StateProvince
Phone E-mail
CCC Chair W Clay Smith
2100 East Exchange Place Tucker Georgia 30084-5336
(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom
CCC Vice Chair Terry L Bilke
Director Standards and Compliance
Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202
317 249-5463 317 249-5358 Fax tbilkemidwestisoorg
CCC Vice Chair Brett Hallborg
Manager of Operations Training
BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2
(604) 455-1778 bretthallborgbchydroc
om
CIPC Chair Barry Lawson
Manager Power Delivery
National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203
(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo
p
CIPC Vice Chair Cyber
Charles F Abell PE Supervising Engineer
Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103
(314) 554-3817 (314) 206-0046 Fx cfabellamerencom
CIPC Vice Chair Physical Security
Robert D Canada Business Assurance Principal
Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308
(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom
OC Chair JS Holeman
Director System Operations
Duke Energy
(704) 382-0011 SamHolemanduke-energycom
Action Plan
Reliability Issues Coordinated Action Plan June 2011 16
Position
Name Title
Company City StateProvince
Phone E-mail
OC Vice Chair Tom Bowe
Executive Director of Compliance
PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403
610-666-4776 (610) 666-4287 Fx bowetpjmcom
PC Chair Tom Burgess
Director FERC Compliance
FirstEnergy Corp
330-384-5225 burgesstfirstenergycorpcom
PC Vice Chair Jeffrey L Mitchell
Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333
(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg
PCGC Chair Jacob Burger
Transmission System Control Coordinator
Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832
(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom
SC Chair Allen Mosher
Senior Director of Policy Analysis and Reliability
American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715
(202) 467-2944 (202) 467-2992 Fx amosherappanetorg
SC Vice Chair PS (Ben) Li
President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6
(647) 388-1498 (905) 887-2235 Fx benbenlica
REMG Representative
Edward A Schwerdt President and CEO
Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703
(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg
NERC Staff Roster
Reliability Issues Coordinated Action Plan
June 2011
17
NNEERRCC SSttaaffff RRoosstteerr
Position
Name Title
PhoneE-mail
NERC Staff Alvin J (AJ) Connor
Manager of Power System Analysis (609) 751-2579 ajconnornercnet
NERC Staff Tom Galloway
Senior Vice President and Chief Reliability Officer
(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet
NERC Staff Brian M Harrell
Manager of CIP Standards Training and Awareness
(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet
NERC Staff Larry J Kezele
Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet
NERC Staff Mark G Lauby
Vice President and Director of Reliability Assessment and Performance Analysis
(609) 452-8060 (609) 452-9550 Fax marklaubynercnet
NERC Staff Maureen E Long
Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet
NERC Staff Scott R Mix
CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet
NERC Staff Michael Moon
Director of Compliance Operations
(404) 446-2560 michaelmoonnercnet
NERC Staff Andrew Rodriquez Director of Standards Development
(404) 446-2560 andyrodriqueznercnet
NERC Staff Peter Knoetgen Director of Training and Accreditation
404-446-9688 peterknoetgennercnet
NERC Staff Herb Schrayshuen
Vice President and Director of Standards
((315) 439-1390 herbschrayshuennercnet
NERC Staff Mark Weatherford
Vice President and Chief Security Officer
(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet
Organization
Reliability Issues Coordinated Action Plan June 2011 4
OOrrggaanniizzaattiioonn
The Electric Reliability Organization (ERO) Strategic Goals through 2015 are summarized in the following key goals2
Goal 1 The ERO will have clear results-based reliability standards that provide for an
adequate level of bulk power system reliability
Goal 2 Bulk power system owners operators and users will demonstrate sustained
cultures of learning and reliability excellence built upon underlying foundations
of compliance and effective risk management and mitigation
Goal 3 The ERO will develop and maintain effective reliability performance measures
and will continue to develop high quality reliability assessments based on long
range and seasonal forecasts as well as emerging issues
Goal 4 Bulk power system owners operators and users will effectively manage risks
from cyber and physical attacks and other high-impact low-frequency events
Goal 5 The ERO will balance the role of being a strong independent enforcement
authority with one of providing owners operators and users timely and
transparent feedback on compliance and effective incentives for improving
reliability
Goal 6 NERC and the regional entities will execute statutory functions in a collaborative
enterprise and thereby achieve efficiencies and effective process controls while
leveraging the expertise of staff and reliability stakeholder resources
Goal 7 The ERO will maintain an exceptional reputation as the trusted leader of the
reliability community and instill a high degree of confidence in the reliability of
the bulk power system
Based on NERCrsquos Strategic Plan and the top priority Issues for bulk power system
reliability the standing committeersquos leadership and NERC staff have assigned lead
committees for each reliability issue and formulated deliverables priorities and
milestones (see Table 1)
2 February 17 2011 Board of Trustees agenda item 7 Electric Reliability Organization Strategic Goals through 2015 httpwwwnerccomdocsdocsbotBOT-0211a-completepdf
Organization
Reliability Issues Coordinated Action Plan June 2011 5
Table 1 Proposed LeadSupport NERC Staff and Standing Committees
Top Priority Issues
NERC Lead
Standing Committee Lead NERC Support
Standing Committee Support
1 M
iso
pe
rati
on
s o
f re
lay
pro
tect
ion
and
co
ntr
ol s
yste
ms
Long
Rodriquez
Connor
Cummings
Bian
Standards Committee
Standard Drafting Teams (SDTs) o Protection System Maintenance o Coordination of Protection
Systems o Generator Verification o Protection System
Misoperations
Planning Committee
System Protection amp Control Subcommittee
Reliability Metrics Working Group
Kezele
Moon
Operating Committee
Compliance and Certification Committee
2 H
um
an e
rro
rs b
y
fie
ld p
ers
on
ne
l
Galloway
Kezele
Operating Committee
Personnel Subcommittee
Long Rodriquez
Connor
Moon
Standards Committee
Reliability Coordination SDT
Operations Communications Protocols SDT
Planning Committee
Compliance and Certification Committee
3 A
mb
igu
ou
s o
r
inco
mp
lete
vo
ice
com
mu
nic
atio
n Galloway
Kezele
Operating Committee
Long Rodriquez
Connor
Moon
Standards Committee
Reliability Coordination SDT
Operations Communications Protocols SDT
Planning Committee
Compliance and Certification Committee
4 R
igh
t-o
f-w
ay
mai
nte
nan
ce Kezele
Carter Operating Committee Connor
Moon
Long Rodriquez
Planning Committee
Compliance and Certification Committee
Standards Committee
Vegetation Management SDT
5 C
han
gin
g
reso
urc
e m
ix
Connor Moura Moura
Moura
Planning Committee
Reliability Assessment Subcommittee
Integration of Variable Generation Task Force
Smart Grid Task Force
Kezele
Moon
Connor Moura
Bian Moura
Operating Committee
Compliance and Certification Committee
Planning Committee
Demand Response Data Task Force
TADSGADS
Smart Grid Task Force
Organization
Reliability Issues Coordinated Action Plan June 2011 6
Top Priority Issues
NERC Lead
Standing Committee Lead NERC Support
Standing Committee Support
6 I
nte
grat
ion
of
ne
w
tech
no
logi
es
Connor Moura Moura
Planning Committee
Smart Grid Task Force
Reliability Assessment Subcommittee
Mix
Moon
Kezele
Critical Infrastructure Protection Committee
Compliance and Certification Committee
Operating Committee
7 P
rep
are
dn
ess
fo
r h
igh
imp
act
low
fre
qu
en
cy e
ven
ts
Connor Bian
Moura
Kezele Kezele
Mix
Roxey
Planning Committee
Spare Equipment Database Task Force
Geomagnetic Disturbance Task Force
Operating Committee
Severe Impact Resilience Task Force
Critical Infrastructure Protection Committee
Cyber Attack Task Force
Moon Compliance and Certification Committee
8 N
on
-tra
dit
ion
al
thre
ats
via
cyb
er-
secu
rity
vuln
era
bili
tie
s
Mix Critical Infrastructure Protection Committee
Connor Moura
Kezele
Moon
Planning Committee
Smart Grid Task Force
Operating Committee
Compliance and Certification Committee
Action Plan
Reliability Issues Coordinated Action Plan
June 2011
7
AAccttiioonn PPllaann
The following Action Plan (Table 2) provides Proposed Enhancements Abstract of activity priorities key deliverables and projected milestones
Table 2 Reliability Issues Action Plan
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
1
Mis
op
erat
ion
s o
f re
lay
pro
tect
ion
an
d c
on
tro
l sys
tem
s
Standards Committee
NERC Reliability Standards
Prepare and achieve approval Reliability Standards that minimize relay control system misoperations
High 1 PRC-005 Protection System
Maintenance 2 PRC-004 Protection System Misoperation
Identification and Correction (Rapid Development Pilot)
3 PRC-024 Generator Performance During Frequency and Voltage Excursions
4 PRC-019 Coordination of Generator Voltage Regulator Controls with Unit Capabilities and Protection
5 PRC-001 Protection System Coordination
1 BOT eta Q3 2011 2 BOT eta Q2 2012 3 BOT eta Q2 2012
4 BOT eta Q4 2012
5 BOT eta Q1 2013
Planning Committee System Protection amp Control Subcommittee
Reliability Metrics Working Group
Provide tools for improvement and measure trends
Enhancing the available tools to planners and operators and measuring trends will support industry efforts to improve
High
1 Guidance for relay maintenance and adequacy of protection engineering
2 Metrics that measure relaycontrol system misoperation
1 SPCS deliver Guide Q2 2012
2 RMWG develops metrics Q4 2011 TADSWG collects data as needed
Low 3 Address ways to enhance operator trainingrelay knowledge
3 SPCS in collaboration with the OCrsquos Personnel Subcommittee deliver tutorial for OC review Q4 2013
2
Hu
man
er
rors
by
fiel
d
per
son
nel
Operating Committee Personnel Subcommittee
Developing root causes lessons learned and guidance on processes can shape industry improvement opportunities
Enhancing industry knowledge of failure modes can improve reliability Standard development on operator training can help ensure successful implementation of recommendations
High 1 Develop guidance for root cause aspects
ndash including planningmanagement decisions
2 Develop refined cause codes to capture root cause
3 Develop processes that lead to quicker sharing of lessons learned
4 Develop guidance on tools development (man‐machine interfacedesign)
1 EAWG develop root cause guidebook by Q4 2012
2 EAWG to develop cause codes by Q4 2013
3 EAWG to streamline lessons learned process by Q4 2011
4 RCWG to create tools development guidebook Q4 2014
Action Plan
Reliability Issues Coordinated Action Plan June 2011 8
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
Medium 5 Develop process guidance for task design
(process resolutions plan the work and work the plan)
6 Support Personnel Training Standard
5 Personnel Subcommittee to prioritize and develop task design guidance Q3 2012
6 Personnel Subcommittee to develop SAR by Q4 2012
3
Am
big
uo
us
or
inco
mp
lete
vo
ice
com
mu
nic
atio
n
Standards Committee NERC Reliability Standards
Prepare and approve Reliability Standards that address communications
High 1 COM-002-3 ndash Communications and
Coordination Standard 2 COM-003-1 ndash Operating Personnel
Communications Protocols Standard
1 BOT eta Q1 2012
2 BOT eta Q4 2012
Operating Committee
Measurably improved communications in system operations
Provide guidance clarifying for operators the role of communications in improvement of reliability Should be a subset of 2 (good practices training deliverables etc)
Medium 1 Use other industries for guidance 2 Provide guidance on the benefits of using
of standard operating language or good practices separate from three-part communications Clarify for operators when communications are mission critical and when prescriptive forms impede reliability
3 Provide clear interpretations of the relevant reliability standards so that there is certainty for directives and associated communication actions
1 RCWG investigates and documents other industryrsquos experience and use of communications Report Q4 2012
2 RCWG develops guidelines on benefits from standard communication approaches Detail the use of communications to improve while not reducing reliability Q3 2013
3 Operating Committee works with NERCrsquos Compliance Operations on Compliance Application Notices (CAN) to eliminate ambiguous terms used in operations Q2 2012
4
Rig
ht-
of-
way
m
ain
ten
ance
Operating Committee (Primary Technical Committee ndash not determined)
Measurably improved right-of-way maintenance
Ensure that ROW maintenance practices result incompliance with FAC-003-2 requirements thereby maintaining reliability
High 1 Document actions undertaken that
address the facility ratings Alert results Leverage the North American Transmission Forum work for planning calculationsratings
2 Provide guidance for operational coordination among operating units TOPs RCs and BAs for different situations
1 Subgroup formed in collaboration with NERC and the Regional Entities along with the North American Transmission forum to document the result of the FAC-003-2 plans to develop industry guidance and action Q4 2011
2 Subgroup should develop guidelines for coordination among TOPs RCs and BAs Q4 2012
Action Plan
Reliability Issues Coordinated Action Plan June 2011 9
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
Standards Committee NERC Reliability Standards
Prepare and achieve approval of Reliability Standard for Transmission Vegetation Management
Low 1 FAC-003-2 ndash Transmission Vegetation
Management 1 BOT eta Q3 2011
5
Ch
angi
ng
reso
urc
e m
ix
Planning Committee
Reliability Assessment Subcommittee
Integration of Variable Generation Task Force
Smart Grid Task Force
Ready industry for the changing resource mix and technology integration by providing guidance and input into NERCrsquos Reliability Standards
Unprecedented change in resource mix being realized through retirement of aging units capital fuel costs along with environmental regulations This change along with technological advances in communications and control can change the well understood character of the bulk power system requiring changes in the planning approaches to ensure operational reliability
Medium 1 IVGTF ndash addressing frequency voltage
response resource flexibility contingency reserves
2 SGTF ndash addressing reliability impacts 3 RIS-RAS - addressing scenarios resource
mix planning probabilistic assessments 4 Scenarios that address resource mix
implications such as natural gas interdependence
5 Evaluate benefit of probabilistic metrics and provide guidance to plannersoperators
6 Develop targetsmetricsrefinements for planningoperation
7 Provide guidance on tools for operators 8 Develop potential standards proposals
or guidanceadvisories that enhance reliability
9 Provide recommendations for expanded planning assessments to address resource mix changes
1 through 13 See Planning Committeersquos Strategic Plan
3
and Action Plan4
3 through 6 Resource Issues and Reliability Assessment Subcommittees
Annual Summer Reliability Assessment
Annual Winter Reliability Assessment
Annual Long-Term Reliability Assessment o Scenarios o Emerging Issues o Probabilistic
3 httpwwwnerccomdocspcAgendaItem_5a_PC_2011-2016_Strategic_Plan_v5_LINKpdf
4 httpwwwnerccomdocspcAgendaItem_5ai_PC_Strategic_Plan_Next20Steps2020Future20Work20Plan_v5_LINKpdf
Action Plan
Reliability Issues Coordinated Action Plan June 2011 10
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
6
Inte
grat
ion
of
new
te
chn
olo
gies
Planning Committee
Smart Grid Task Force
Reliability Assessment Subcommittee
10 Smart Grid impacts from distribution
systems (Address cyber aspects in 8 Non-Traditional Threats via Cyber-Security Vulnerabilities)
11 IVGTF dealing with distribution (renewables EV and conventional) resource integration
12 DRDTF addressing high levels of demand response integration
13 TIS and SPCS will provide guidance for modeling and controls systems managementcoordination
Assessment
7
Pre
par
edn
ess
for
hig
h
imp
act
low
fre
qu
ency
ev
ents
Planning Committee
Spare Equipment Database Task Force
Geomagnetic Disturbance Task Force
Operating Committee
Severe Impact Resilience Task Force
Critical Infrastructure Protection Committee
Cyber Attack Task Force
Address the risks from selected high impact low frequency events which can have unacceptable consequences on bulk power system reliability
The bulk power system has significant amounts of built-in resiliency However it has been planned and operated with the known risks to successfully manage system performance With changing threats from cyber physical and new facts about GMD industry will adjust their planning and operational activities to address these evolving risks
High 1 The Electricity Subsector Coordinating
Council has developed a BOT approved Critical Infrastructure Strategic Roadmap
5 in Q4 2010
2 The technical Committees have developed a Critical Infrastructure Strategic Initiatives Coordinated Action Plan
6 BOT approved in Q4 2010
1-2 Covered in the technical committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan
5 httpwwwnerccomdocsesccESCC_Critical_Infrastructure_Strategic_Roadmappdf
6 httpwwwnerccomdocsciscapCritical_Infrastructure_Strategic_Initiatives_Coordinated_Action_Plan_BOT_Apprd_11-2010pdf
Action Plan
Reliability Issues Coordinated Action Plan June 2011 11
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
8
No
n-t
rad
itio
nal
th
reat
s vi
a cy
ber
-se
curi
ty
vuln
erab
iliti
es
Critical Infrastructure Protection Committee
A resilient system fortified by industry planning and operational practices
The continuously evolving threat from cyber-security vulnerabilities requires new processes and procedures both for system planning and operations Industry awareness and cooperation with governmental jurisdictions are key aspects for this improved situational awareness
High
1 Also part of the deliverables in item 7 Preparedness for High Impact Low Frequency events
2 Metric development to measure cyber strength being developed with the Planning Committeersquos Smart Grid Task Force (SGTF)
3 Ongoing industry Alerts as required 4 Guidelines required to advise industry on
the establishment of appropriate cyber-security programs in their organizations
1 Covered in the technical
committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan
2 See Planning Committeersquos Strategic Plan and Action Plan along with the work plan for the SGTF
7
3 See NERCrsquos Alert website8
4 A subgroup formed to develop guidelines reviewing other industryrsquos to take advantage of existing knowledge 2012 Q4
7 httpwwwnerccomfilesSGTF_Report_Final_posted_v11pdf
8 httpwwwnerccompagephpcid=5|63
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
12
AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess
Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the
following list and abstract description was developed
1 Misoperations of relay protection and control systems ndash Nearly all major system failures
excluding perhaps those caused by severe weather have misoperations of relays or
automatic controls as a factor contributing to the propagation of the failure Protection
systems are designed to operate reliably when needed under the presence of a fault on the
system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without
allowing the fault to transfer into adjoining facilities The greater the number of facilities
involved in an event the more severe the impact to the rest of the bulk power system with
cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout
being the extreme Relays can misoperate either operate when not needed or fail to
operate when needed for a number of reasons First the device could experience an
internal failure ndash but this is rare Most commonly relays fail to operate correctly due to
incorrect settings improper coordination (of timing and set points) with other devices
ineffective maintenance and testing or failure of communications channels or power
supplies Preventable errors can be introduced by field personnel and their supervisors or
more programmatically by the organization Adding to the risk is that system protection is
an extremely complex engineering field ndashthere are many practitioners but few masters
2 Human errors by field personnel ndash Field personnel play an important role in the
maintenance and operation of the bulk power system They often are switching equipment
in and out of service and aligning alternative configurations Risks can be introduced when
field personnel operate equipment in a manner that reduces the redundancy of the bulk
power system sometimes even creating single points of failure that would not exist
normally Taking outages of equipment to conduct maintenance is a routine and necessary
part of reliable bulk power system operation However any alterations to the configuration
of the network must be carefully planned in advance to minimize loss of redundancy and
avoid unintended single points of failure It is also important that such changes and risks be
communicated to system operators and reliability coordinators in advance so that they can
make adjustments in their operating plans and reliability assessments
3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system
operators and reliability coordinators are comfortable with informal communications with
field and power plant personnel and neighboring systems Experience from analyzing
various events indicates there is often a sense of awkwardness when personnel transition
from conversational discussion to issuing reliability instructions It is also human nature to
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
13
be uncomfortable in applying formal communication procedures after personnel have
developed informal styles over many years Confusion in making the transition from normal
conversation to formal communications can introduce misunderstandings and possibly even
incorrect actions or assumptions Further once the need to transition to more formal
structure is recognized the transition is often not complete or effective Results can include
unclear instructions confusion whether an instruction is a suggestion or a directive whether
specific action is required or a set of alternative actions are permissible and confusion over
what elements of the system are being addressed
4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation
management programs as a key recommendation for avoiding future cascading failures
More broadly any encroachments in the right-of-way that reduce clearances to the point of
lowering facility ratings or reducing the randomness of possible contacts can be a risk to
reliability Although these impacts may not always be readily apparent under extreme wind
and temperature conditions they may become more of a risk to bulk power system
reliability There are many challenges to effective right-of-way maintenance especially
maintaining proper clearances including interventions by private landowners local
municipalities and federal and state landowners
5 Changing resource mix ndash Energy and environmental policies along with energy markets are
driving proposals toward unprecedented changes in the resource mix of the bulk power
system Examples include integration of significant amounts of renewable (variable such as
wind and solar) natural gas storage and demand resources to provide energy and capacity
Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a
century of operational experience with the existing resource mix However integration of
these new resources results in operating characteristics significantly different from
conventional steam production facilities An array of reliability services must be provided
over a range of time horizons from seconds to minutes to hours and days and annually such
as load following contingency reserves frequency response reactive supply capacity and
voltage control and power system stability Continued reliable operation of the bulk power
system will require an industry dialog with policymakers and regulators Understanding the
impacts on reliability will depend on accurate modeling of new resources and development
of new methods and tools for the provision of essential reliability services
6 Integration of new technologies ndash Introduction of electric vehicles demand-side
management variable generation distributed resources and smart grid technologies
presents tremendous opportunities but also introduces changes to the operating
characteristics of the bulk power system Integration of these new technologies requires
changes in the way the bulk power system is planned and operated to maintain reliability
Further additional toolsmodels are required to support their integration to meet policy and
strategic goals Without these changes it will be challenging to maintain reliability with
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
14
large-scale deployments For example some smart grid devicessystems increase exposure
to cyber threats while variable generation requires additional ancillary services Integration
of these new technologies must be achieved in a manner that does not undermine existing
levels of stability resilience and security of the bulk power system
7 Preparedness for high impact low frequency events ndash Although there is a wide range of
threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for
possible events that could debilitate the bulk power system for extended periods such as
widespread coordinated physicalcyber attacks or geomagnetic storms The industry must
consider improving the design of the bulk power system to address these potential risks and
prepare coordinated North American response plans for use during catastrophic events and
be ready to deploy those plans to restore essential services in a timely manner
8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-
based programs policies and processes to prepare for react to and recover from cyber
security vulnerabilities is a high priority for the industry The bulk power system has not yet
experienced wide-spread cyber-attacks and a contributing factor has been the traditional
physical separation between the industrial control systemSCADA environment and the
business and administrative networks This situation however is rapidly changing
predominantly due to the efficiencies that can be achieved by leveraging shared networks
and resources so now even physically separated environments are susceptible For example
the bulk power system could be as vulnerable to digital threats as IT systems but with far
more critical implications as the recent Stuxnet virus has shown Disabling or turning
systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial
control system software can be changed and data can be stolen without intrusions even
being detected These injection vectors serve as a blueprint for future attackers who wish to
access controllers safety systems and protection devices to insert malicious code targeting
changes to set points and switches as well as alteration or suppression of measurements
Standing Committee Coordination Group Roster
Reliability Issues Coordinated Action Plan
June 2011
15
SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr
Position
Name Title
Company City StateProvince
Phone E-mail
CCC Chair W Clay Smith
2100 East Exchange Place Tucker Georgia 30084-5336
(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom
CCC Vice Chair Terry L Bilke
Director Standards and Compliance
Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202
317 249-5463 317 249-5358 Fax tbilkemidwestisoorg
CCC Vice Chair Brett Hallborg
Manager of Operations Training
BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2
(604) 455-1778 bretthallborgbchydroc
om
CIPC Chair Barry Lawson
Manager Power Delivery
National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203
(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo
p
CIPC Vice Chair Cyber
Charles F Abell PE Supervising Engineer
Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103
(314) 554-3817 (314) 206-0046 Fx cfabellamerencom
CIPC Vice Chair Physical Security
Robert D Canada Business Assurance Principal
Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308
(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom
OC Chair JS Holeman
Director System Operations
Duke Energy
(704) 382-0011 SamHolemanduke-energycom
Action Plan
Reliability Issues Coordinated Action Plan June 2011 16
Position
Name Title
Company City StateProvince
Phone E-mail
OC Vice Chair Tom Bowe
Executive Director of Compliance
PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403
610-666-4776 (610) 666-4287 Fx bowetpjmcom
PC Chair Tom Burgess
Director FERC Compliance
FirstEnergy Corp
330-384-5225 burgesstfirstenergycorpcom
PC Vice Chair Jeffrey L Mitchell
Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333
(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg
PCGC Chair Jacob Burger
Transmission System Control Coordinator
Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832
(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom
SC Chair Allen Mosher
Senior Director of Policy Analysis and Reliability
American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715
(202) 467-2944 (202) 467-2992 Fx amosherappanetorg
SC Vice Chair PS (Ben) Li
President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6
(647) 388-1498 (905) 887-2235 Fx benbenlica
REMG Representative
Edward A Schwerdt President and CEO
Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703
(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg
NERC Staff Roster
Reliability Issues Coordinated Action Plan
June 2011
17
NNEERRCC SSttaaffff RRoosstteerr
Position
Name Title
PhoneE-mail
NERC Staff Alvin J (AJ) Connor
Manager of Power System Analysis (609) 751-2579 ajconnornercnet
NERC Staff Tom Galloway
Senior Vice President and Chief Reliability Officer
(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet
NERC Staff Brian M Harrell
Manager of CIP Standards Training and Awareness
(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet
NERC Staff Larry J Kezele
Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet
NERC Staff Mark G Lauby
Vice President and Director of Reliability Assessment and Performance Analysis
(609) 452-8060 (609) 452-9550 Fax marklaubynercnet
NERC Staff Maureen E Long
Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet
NERC Staff Scott R Mix
CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet
NERC Staff Michael Moon
Director of Compliance Operations
(404) 446-2560 michaelmoonnercnet
NERC Staff Andrew Rodriquez Director of Standards Development
(404) 446-2560 andyrodriqueznercnet
NERC Staff Peter Knoetgen Director of Training and Accreditation
404-446-9688 peterknoetgennercnet
NERC Staff Herb Schrayshuen
Vice President and Director of Standards
((315) 439-1390 herbschrayshuennercnet
NERC Staff Mark Weatherford
Vice President and Chief Security Officer
(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet
Organization
Reliability Issues Coordinated Action Plan June 2011 5
Table 1 Proposed LeadSupport NERC Staff and Standing Committees
Top Priority Issues
NERC Lead
Standing Committee Lead NERC Support
Standing Committee Support
1 M
iso
pe
rati
on
s o
f re
lay
pro
tect
ion
and
co
ntr
ol s
yste
ms
Long
Rodriquez
Connor
Cummings
Bian
Standards Committee
Standard Drafting Teams (SDTs) o Protection System Maintenance o Coordination of Protection
Systems o Generator Verification o Protection System
Misoperations
Planning Committee
System Protection amp Control Subcommittee
Reliability Metrics Working Group
Kezele
Moon
Operating Committee
Compliance and Certification Committee
2 H
um
an e
rro
rs b
y
fie
ld p
ers
on
ne
l
Galloway
Kezele
Operating Committee
Personnel Subcommittee
Long Rodriquez
Connor
Moon
Standards Committee
Reliability Coordination SDT
Operations Communications Protocols SDT
Planning Committee
Compliance and Certification Committee
3 A
mb
igu
ou
s o
r
inco
mp
lete
vo
ice
com
mu
nic
atio
n Galloway
Kezele
Operating Committee
Long Rodriquez
Connor
Moon
Standards Committee
Reliability Coordination SDT
Operations Communications Protocols SDT
Planning Committee
Compliance and Certification Committee
4 R
igh
t-o
f-w
ay
mai
nte
nan
ce Kezele
Carter Operating Committee Connor
Moon
Long Rodriquez
Planning Committee
Compliance and Certification Committee
Standards Committee
Vegetation Management SDT
5 C
han
gin
g
reso
urc
e m
ix
Connor Moura Moura
Moura
Planning Committee
Reliability Assessment Subcommittee
Integration of Variable Generation Task Force
Smart Grid Task Force
Kezele
Moon
Connor Moura
Bian Moura
Operating Committee
Compliance and Certification Committee
Planning Committee
Demand Response Data Task Force
TADSGADS
Smart Grid Task Force
Organization
Reliability Issues Coordinated Action Plan June 2011 6
Top Priority Issues
NERC Lead
Standing Committee Lead NERC Support
Standing Committee Support
6 I
nte
grat
ion
of
ne
w
tech
no
logi
es
Connor Moura Moura
Planning Committee
Smart Grid Task Force
Reliability Assessment Subcommittee
Mix
Moon
Kezele
Critical Infrastructure Protection Committee
Compliance and Certification Committee
Operating Committee
7 P
rep
are
dn
ess
fo
r h
igh
imp
act
low
fre
qu
en
cy e
ven
ts
Connor Bian
Moura
Kezele Kezele
Mix
Roxey
Planning Committee
Spare Equipment Database Task Force
Geomagnetic Disturbance Task Force
Operating Committee
Severe Impact Resilience Task Force
Critical Infrastructure Protection Committee
Cyber Attack Task Force
Moon Compliance and Certification Committee
8 N
on
-tra
dit
ion
al
thre
ats
via
cyb
er-
secu
rity
vuln
era
bili
tie
s
Mix Critical Infrastructure Protection Committee
Connor Moura
Kezele
Moon
Planning Committee
Smart Grid Task Force
Operating Committee
Compliance and Certification Committee
Action Plan
Reliability Issues Coordinated Action Plan
June 2011
7
AAccttiioonn PPllaann
The following Action Plan (Table 2) provides Proposed Enhancements Abstract of activity priorities key deliverables and projected milestones
Table 2 Reliability Issues Action Plan
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
1
Mis
op
erat
ion
s o
f re
lay
pro
tect
ion
an
d c
on
tro
l sys
tem
s
Standards Committee
NERC Reliability Standards
Prepare and achieve approval Reliability Standards that minimize relay control system misoperations
High 1 PRC-005 Protection System
Maintenance 2 PRC-004 Protection System Misoperation
Identification and Correction (Rapid Development Pilot)
3 PRC-024 Generator Performance During Frequency and Voltage Excursions
4 PRC-019 Coordination of Generator Voltage Regulator Controls with Unit Capabilities and Protection
5 PRC-001 Protection System Coordination
1 BOT eta Q3 2011 2 BOT eta Q2 2012 3 BOT eta Q2 2012
4 BOT eta Q4 2012
5 BOT eta Q1 2013
Planning Committee System Protection amp Control Subcommittee
Reliability Metrics Working Group
Provide tools for improvement and measure trends
Enhancing the available tools to planners and operators and measuring trends will support industry efforts to improve
High
1 Guidance for relay maintenance and adequacy of protection engineering
2 Metrics that measure relaycontrol system misoperation
1 SPCS deliver Guide Q2 2012
2 RMWG develops metrics Q4 2011 TADSWG collects data as needed
Low 3 Address ways to enhance operator trainingrelay knowledge
3 SPCS in collaboration with the OCrsquos Personnel Subcommittee deliver tutorial for OC review Q4 2013
2
Hu
man
er
rors
by
fiel
d
per
son
nel
Operating Committee Personnel Subcommittee
Developing root causes lessons learned and guidance on processes can shape industry improvement opportunities
Enhancing industry knowledge of failure modes can improve reliability Standard development on operator training can help ensure successful implementation of recommendations
High 1 Develop guidance for root cause aspects
ndash including planningmanagement decisions
2 Develop refined cause codes to capture root cause
3 Develop processes that lead to quicker sharing of lessons learned
4 Develop guidance on tools development (man‐machine interfacedesign)
1 EAWG develop root cause guidebook by Q4 2012
2 EAWG to develop cause codes by Q4 2013
3 EAWG to streamline lessons learned process by Q4 2011
4 RCWG to create tools development guidebook Q4 2014
Action Plan
Reliability Issues Coordinated Action Plan June 2011 8
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
Medium 5 Develop process guidance for task design
(process resolutions plan the work and work the plan)
6 Support Personnel Training Standard
5 Personnel Subcommittee to prioritize and develop task design guidance Q3 2012
6 Personnel Subcommittee to develop SAR by Q4 2012
3
Am
big
uo
us
or
inco
mp
lete
vo
ice
com
mu
nic
atio
n
Standards Committee NERC Reliability Standards
Prepare and approve Reliability Standards that address communications
High 1 COM-002-3 ndash Communications and
Coordination Standard 2 COM-003-1 ndash Operating Personnel
Communications Protocols Standard
1 BOT eta Q1 2012
2 BOT eta Q4 2012
Operating Committee
Measurably improved communications in system operations
Provide guidance clarifying for operators the role of communications in improvement of reliability Should be a subset of 2 (good practices training deliverables etc)
Medium 1 Use other industries for guidance 2 Provide guidance on the benefits of using
of standard operating language or good practices separate from three-part communications Clarify for operators when communications are mission critical and when prescriptive forms impede reliability
3 Provide clear interpretations of the relevant reliability standards so that there is certainty for directives and associated communication actions
1 RCWG investigates and documents other industryrsquos experience and use of communications Report Q4 2012
2 RCWG develops guidelines on benefits from standard communication approaches Detail the use of communications to improve while not reducing reliability Q3 2013
3 Operating Committee works with NERCrsquos Compliance Operations on Compliance Application Notices (CAN) to eliminate ambiguous terms used in operations Q2 2012
4
Rig
ht-
of-
way
m
ain
ten
ance
Operating Committee (Primary Technical Committee ndash not determined)
Measurably improved right-of-way maintenance
Ensure that ROW maintenance practices result incompliance with FAC-003-2 requirements thereby maintaining reliability
High 1 Document actions undertaken that
address the facility ratings Alert results Leverage the North American Transmission Forum work for planning calculationsratings
2 Provide guidance for operational coordination among operating units TOPs RCs and BAs for different situations
1 Subgroup formed in collaboration with NERC and the Regional Entities along with the North American Transmission forum to document the result of the FAC-003-2 plans to develop industry guidance and action Q4 2011
2 Subgroup should develop guidelines for coordination among TOPs RCs and BAs Q4 2012
Action Plan
Reliability Issues Coordinated Action Plan June 2011 9
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
Standards Committee NERC Reliability Standards
Prepare and achieve approval of Reliability Standard for Transmission Vegetation Management
Low 1 FAC-003-2 ndash Transmission Vegetation
Management 1 BOT eta Q3 2011
5
Ch
angi
ng
reso
urc
e m
ix
Planning Committee
Reliability Assessment Subcommittee
Integration of Variable Generation Task Force
Smart Grid Task Force
Ready industry for the changing resource mix and technology integration by providing guidance and input into NERCrsquos Reliability Standards
Unprecedented change in resource mix being realized through retirement of aging units capital fuel costs along with environmental regulations This change along with technological advances in communications and control can change the well understood character of the bulk power system requiring changes in the planning approaches to ensure operational reliability
Medium 1 IVGTF ndash addressing frequency voltage
response resource flexibility contingency reserves
2 SGTF ndash addressing reliability impacts 3 RIS-RAS - addressing scenarios resource
mix planning probabilistic assessments 4 Scenarios that address resource mix
implications such as natural gas interdependence
5 Evaluate benefit of probabilistic metrics and provide guidance to plannersoperators
6 Develop targetsmetricsrefinements for planningoperation
7 Provide guidance on tools for operators 8 Develop potential standards proposals
or guidanceadvisories that enhance reliability
9 Provide recommendations for expanded planning assessments to address resource mix changes
1 through 13 See Planning Committeersquos Strategic Plan
3
and Action Plan4
3 through 6 Resource Issues and Reliability Assessment Subcommittees
Annual Summer Reliability Assessment
Annual Winter Reliability Assessment
Annual Long-Term Reliability Assessment o Scenarios o Emerging Issues o Probabilistic
3 httpwwwnerccomdocspcAgendaItem_5a_PC_2011-2016_Strategic_Plan_v5_LINKpdf
4 httpwwwnerccomdocspcAgendaItem_5ai_PC_Strategic_Plan_Next20Steps2020Future20Work20Plan_v5_LINKpdf
Action Plan
Reliability Issues Coordinated Action Plan June 2011 10
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
6
Inte
grat
ion
of
new
te
chn
olo
gies
Planning Committee
Smart Grid Task Force
Reliability Assessment Subcommittee
10 Smart Grid impacts from distribution
systems (Address cyber aspects in 8 Non-Traditional Threats via Cyber-Security Vulnerabilities)
11 IVGTF dealing with distribution (renewables EV and conventional) resource integration
12 DRDTF addressing high levels of demand response integration
13 TIS and SPCS will provide guidance for modeling and controls systems managementcoordination
Assessment
7
Pre
par
edn
ess
for
hig
h
imp
act
low
fre
qu
ency
ev
ents
Planning Committee
Spare Equipment Database Task Force
Geomagnetic Disturbance Task Force
Operating Committee
Severe Impact Resilience Task Force
Critical Infrastructure Protection Committee
Cyber Attack Task Force
Address the risks from selected high impact low frequency events which can have unacceptable consequences on bulk power system reliability
The bulk power system has significant amounts of built-in resiliency However it has been planned and operated with the known risks to successfully manage system performance With changing threats from cyber physical and new facts about GMD industry will adjust their planning and operational activities to address these evolving risks
High 1 The Electricity Subsector Coordinating
Council has developed a BOT approved Critical Infrastructure Strategic Roadmap
5 in Q4 2010
2 The technical Committees have developed a Critical Infrastructure Strategic Initiatives Coordinated Action Plan
6 BOT approved in Q4 2010
1-2 Covered in the technical committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan
5 httpwwwnerccomdocsesccESCC_Critical_Infrastructure_Strategic_Roadmappdf
6 httpwwwnerccomdocsciscapCritical_Infrastructure_Strategic_Initiatives_Coordinated_Action_Plan_BOT_Apprd_11-2010pdf
Action Plan
Reliability Issues Coordinated Action Plan June 2011 11
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
8
No
n-t
rad
itio
nal
th
reat
s vi
a cy
ber
-se
curi
ty
vuln
erab
iliti
es
Critical Infrastructure Protection Committee
A resilient system fortified by industry planning and operational practices
The continuously evolving threat from cyber-security vulnerabilities requires new processes and procedures both for system planning and operations Industry awareness and cooperation with governmental jurisdictions are key aspects for this improved situational awareness
High
1 Also part of the deliverables in item 7 Preparedness for High Impact Low Frequency events
2 Metric development to measure cyber strength being developed with the Planning Committeersquos Smart Grid Task Force (SGTF)
3 Ongoing industry Alerts as required 4 Guidelines required to advise industry on
the establishment of appropriate cyber-security programs in their organizations
1 Covered in the technical
committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan
2 See Planning Committeersquos Strategic Plan and Action Plan along with the work plan for the SGTF
7
3 See NERCrsquos Alert website8
4 A subgroup formed to develop guidelines reviewing other industryrsquos to take advantage of existing knowledge 2012 Q4
7 httpwwwnerccomfilesSGTF_Report_Final_posted_v11pdf
8 httpwwwnerccompagephpcid=5|63
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
12
AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess
Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the
following list and abstract description was developed
1 Misoperations of relay protection and control systems ndash Nearly all major system failures
excluding perhaps those caused by severe weather have misoperations of relays or
automatic controls as a factor contributing to the propagation of the failure Protection
systems are designed to operate reliably when needed under the presence of a fault on the
system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without
allowing the fault to transfer into adjoining facilities The greater the number of facilities
involved in an event the more severe the impact to the rest of the bulk power system with
cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout
being the extreme Relays can misoperate either operate when not needed or fail to
operate when needed for a number of reasons First the device could experience an
internal failure ndash but this is rare Most commonly relays fail to operate correctly due to
incorrect settings improper coordination (of timing and set points) with other devices
ineffective maintenance and testing or failure of communications channels or power
supplies Preventable errors can be introduced by field personnel and their supervisors or
more programmatically by the organization Adding to the risk is that system protection is
an extremely complex engineering field ndashthere are many practitioners but few masters
2 Human errors by field personnel ndash Field personnel play an important role in the
maintenance and operation of the bulk power system They often are switching equipment
in and out of service and aligning alternative configurations Risks can be introduced when
field personnel operate equipment in a manner that reduces the redundancy of the bulk
power system sometimes even creating single points of failure that would not exist
normally Taking outages of equipment to conduct maintenance is a routine and necessary
part of reliable bulk power system operation However any alterations to the configuration
of the network must be carefully planned in advance to minimize loss of redundancy and
avoid unintended single points of failure It is also important that such changes and risks be
communicated to system operators and reliability coordinators in advance so that they can
make adjustments in their operating plans and reliability assessments
3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system
operators and reliability coordinators are comfortable with informal communications with
field and power plant personnel and neighboring systems Experience from analyzing
various events indicates there is often a sense of awkwardness when personnel transition
from conversational discussion to issuing reliability instructions It is also human nature to
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
13
be uncomfortable in applying formal communication procedures after personnel have
developed informal styles over many years Confusion in making the transition from normal
conversation to formal communications can introduce misunderstandings and possibly even
incorrect actions or assumptions Further once the need to transition to more formal
structure is recognized the transition is often not complete or effective Results can include
unclear instructions confusion whether an instruction is a suggestion or a directive whether
specific action is required or a set of alternative actions are permissible and confusion over
what elements of the system are being addressed
4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation
management programs as a key recommendation for avoiding future cascading failures
More broadly any encroachments in the right-of-way that reduce clearances to the point of
lowering facility ratings or reducing the randomness of possible contacts can be a risk to
reliability Although these impacts may not always be readily apparent under extreme wind
and temperature conditions they may become more of a risk to bulk power system
reliability There are many challenges to effective right-of-way maintenance especially
maintaining proper clearances including interventions by private landowners local
municipalities and federal and state landowners
5 Changing resource mix ndash Energy and environmental policies along with energy markets are
driving proposals toward unprecedented changes in the resource mix of the bulk power
system Examples include integration of significant amounts of renewable (variable such as
wind and solar) natural gas storage and demand resources to provide energy and capacity
Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a
century of operational experience with the existing resource mix However integration of
these new resources results in operating characteristics significantly different from
conventional steam production facilities An array of reliability services must be provided
over a range of time horizons from seconds to minutes to hours and days and annually such
as load following contingency reserves frequency response reactive supply capacity and
voltage control and power system stability Continued reliable operation of the bulk power
system will require an industry dialog with policymakers and regulators Understanding the
impacts on reliability will depend on accurate modeling of new resources and development
of new methods and tools for the provision of essential reliability services
6 Integration of new technologies ndash Introduction of electric vehicles demand-side
management variable generation distributed resources and smart grid technologies
presents tremendous opportunities but also introduces changes to the operating
characteristics of the bulk power system Integration of these new technologies requires
changes in the way the bulk power system is planned and operated to maintain reliability
Further additional toolsmodels are required to support their integration to meet policy and
strategic goals Without these changes it will be challenging to maintain reliability with
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
14
large-scale deployments For example some smart grid devicessystems increase exposure
to cyber threats while variable generation requires additional ancillary services Integration
of these new technologies must be achieved in a manner that does not undermine existing
levels of stability resilience and security of the bulk power system
7 Preparedness for high impact low frequency events ndash Although there is a wide range of
threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for
possible events that could debilitate the bulk power system for extended periods such as
widespread coordinated physicalcyber attacks or geomagnetic storms The industry must
consider improving the design of the bulk power system to address these potential risks and
prepare coordinated North American response plans for use during catastrophic events and
be ready to deploy those plans to restore essential services in a timely manner
8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-
based programs policies and processes to prepare for react to and recover from cyber
security vulnerabilities is a high priority for the industry The bulk power system has not yet
experienced wide-spread cyber-attacks and a contributing factor has been the traditional
physical separation between the industrial control systemSCADA environment and the
business and administrative networks This situation however is rapidly changing
predominantly due to the efficiencies that can be achieved by leveraging shared networks
and resources so now even physically separated environments are susceptible For example
the bulk power system could be as vulnerable to digital threats as IT systems but with far
more critical implications as the recent Stuxnet virus has shown Disabling or turning
systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial
control system software can be changed and data can be stolen without intrusions even
being detected These injection vectors serve as a blueprint for future attackers who wish to
access controllers safety systems and protection devices to insert malicious code targeting
changes to set points and switches as well as alteration or suppression of measurements
Standing Committee Coordination Group Roster
Reliability Issues Coordinated Action Plan
June 2011
15
SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr
Position
Name Title
Company City StateProvince
Phone E-mail
CCC Chair W Clay Smith
2100 East Exchange Place Tucker Georgia 30084-5336
(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom
CCC Vice Chair Terry L Bilke
Director Standards and Compliance
Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202
317 249-5463 317 249-5358 Fax tbilkemidwestisoorg
CCC Vice Chair Brett Hallborg
Manager of Operations Training
BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2
(604) 455-1778 bretthallborgbchydroc
om
CIPC Chair Barry Lawson
Manager Power Delivery
National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203
(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo
p
CIPC Vice Chair Cyber
Charles F Abell PE Supervising Engineer
Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103
(314) 554-3817 (314) 206-0046 Fx cfabellamerencom
CIPC Vice Chair Physical Security
Robert D Canada Business Assurance Principal
Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308
(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom
OC Chair JS Holeman
Director System Operations
Duke Energy
(704) 382-0011 SamHolemanduke-energycom
Action Plan
Reliability Issues Coordinated Action Plan June 2011 16
Position
Name Title
Company City StateProvince
Phone E-mail
OC Vice Chair Tom Bowe
Executive Director of Compliance
PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403
610-666-4776 (610) 666-4287 Fx bowetpjmcom
PC Chair Tom Burgess
Director FERC Compliance
FirstEnergy Corp
330-384-5225 burgesstfirstenergycorpcom
PC Vice Chair Jeffrey L Mitchell
Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333
(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg
PCGC Chair Jacob Burger
Transmission System Control Coordinator
Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832
(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom
SC Chair Allen Mosher
Senior Director of Policy Analysis and Reliability
American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715
(202) 467-2944 (202) 467-2992 Fx amosherappanetorg
SC Vice Chair PS (Ben) Li
President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6
(647) 388-1498 (905) 887-2235 Fx benbenlica
REMG Representative
Edward A Schwerdt President and CEO
Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703
(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg
NERC Staff Roster
Reliability Issues Coordinated Action Plan
June 2011
17
NNEERRCC SSttaaffff RRoosstteerr
Position
Name Title
PhoneE-mail
NERC Staff Alvin J (AJ) Connor
Manager of Power System Analysis (609) 751-2579 ajconnornercnet
NERC Staff Tom Galloway
Senior Vice President and Chief Reliability Officer
(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet
NERC Staff Brian M Harrell
Manager of CIP Standards Training and Awareness
(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet
NERC Staff Larry J Kezele
Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet
NERC Staff Mark G Lauby
Vice President and Director of Reliability Assessment and Performance Analysis
(609) 452-8060 (609) 452-9550 Fax marklaubynercnet
NERC Staff Maureen E Long
Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet
NERC Staff Scott R Mix
CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet
NERC Staff Michael Moon
Director of Compliance Operations
(404) 446-2560 michaelmoonnercnet
NERC Staff Andrew Rodriquez Director of Standards Development
(404) 446-2560 andyrodriqueznercnet
NERC Staff Peter Knoetgen Director of Training and Accreditation
404-446-9688 peterknoetgennercnet
NERC Staff Herb Schrayshuen
Vice President and Director of Standards
((315) 439-1390 herbschrayshuennercnet
NERC Staff Mark Weatherford
Vice President and Chief Security Officer
(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet
Organization
Reliability Issues Coordinated Action Plan June 2011 6
Top Priority Issues
NERC Lead
Standing Committee Lead NERC Support
Standing Committee Support
6 I
nte
grat
ion
of
ne
w
tech
no
logi
es
Connor Moura Moura
Planning Committee
Smart Grid Task Force
Reliability Assessment Subcommittee
Mix
Moon
Kezele
Critical Infrastructure Protection Committee
Compliance and Certification Committee
Operating Committee
7 P
rep
are
dn
ess
fo
r h
igh
imp
act
low
fre
qu
en
cy e
ven
ts
Connor Bian
Moura
Kezele Kezele
Mix
Roxey
Planning Committee
Spare Equipment Database Task Force
Geomagnetic Disturbance Task Force
Operating Committee
Severe Impact Resilience Task Force
Critical Infrastructure Protection Committee
Cyber Attack Task Force
Moon Compliance and Certification Committee
8 N
on
-tra
dit
ion
al
thre
ats
via
cyb
er-
secu
rity
vuln
era
bili
tie
s
Mix Critical Infrastructure Protection Committee
Connor Moura
Kezele
Moon
Planning Committee
Smart Grid Task Force
Operating Committee
Compliance and Certification Committee
Action Plan
Reliability Issues Coordinated Action Plan
June 2011
7
AAccttiioonn PPllaann
The following Action Plan (Table 2) provides Proposed Enhancements Abstract of activity priorities key deliverables and projected milestones
Table 2 Reliability Issues Action Plan
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
1
Mis
op
erat
ion
s o
f re
lay
pro
tect
ion
an
d c
on
tro
l sys
tem
s
Standards Committee
NERC Reliability Standards
Prepare and achieve approval Reliability Standards that minimize relay control system misoperations
High 1 PRC-005 Protection System
Maintenance 2 PRC-004 Protection System Misoperation
Identification and Correction (Rapid Development Pilot)
3 PRC-024 Generator Performance During Frequency and Voltage Excursions
4 PRC-019 Coordination of Generator Voltage Regulator Controls with Unit Capabilities and Protection
5 PRC-001 Protection System Coordination
1 BOT eta Q3 2011 2 BOT eta Q2 2012 3 BOT eta Q2 2012
4 BOT eta Q4 2012
5 BOT eta Q1 2013
Planning Committee System Protection amp Control Subcommittee
Reliability Metrics Working Group
Provide tools for improvement and measure trends
Enhancing the available tools to planners and operators and measuring trends will support industry efforts to improve
High
1 Guidance for relay maintenance and adequacy of protection engineering
2 Metrics that measure relaycontrol system misoperation
1 SPCS deliver Guide Q2 2012
2 RMWG develops metrics Q4 2011 TADSWG collects data as needed
Low 3 Address ways to enhance operator trainingrelay knowledge
3 SPCS in collaboration with the OCrsquos Personnel Subcommittee deliver tutorial for OC review Q4 2013
2
Hu
man
er
rors
by
fiel
d
per
son
nel
Operating Committee Personnel Subcommittee
Developing root causes lessons learned and guidance on processes can shape industry improvement opportunities
Enhancing industry knowledge of failure modes can improve reliability Standard development on operator training can help ensure successful implementation of recommendations
High 1 Develop guidance for root cause aspects
ndash including planningmanagement decisions
2 Develop refined cause codes to capture root cause
3 Develop processes that lead to quicker sharing of lessons learned
4 Develop guidance on tools development (man‐machine interfacedesign)
1 EAWG develop root cause guidebook by Q4 2012
2 EAWG to develop cause codes by Q4 2013
3 EAWG to streamline lessons learned process by Q4 2011
4 RCWG to create tools development guidebook Q4 2014
Action Plan
Reliability Issues Coordinated Action Plan June 2011 8
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
Medium 5 Develop process guidance for task design
(process resolutions plan the work and work the plan)
6 Support Personnel Training Standard
5 Personnel Subcommittee to prioritize and develop task design guidance Q3 2012
6 Personnel Subcommittee to develop SAR by Q4 2012
3
Am
big
uo
us
or
inco
mp
lete
vo
ice
com
mu
nic
atio
n
Standards Committee NERC Reliability Standards
Prepare and approve Reliability Standards that address communications
High 1 COM-002-3 ndash Communications and
Coordination Standard 2 COM-003-1 ndash Operating Personnel
Communications Protocols Standard
1 BOT eta Q1 2012
2 BOT eta Q4 2012
Operating Committee
Measurably improved communications in system operations
Provide guidance clarifying for operators the role of communications in improvement of reliability Should be a subset of 2 (good practices training deliverables etc)
Medium 1 Use other industries for guidance 2 Provide guidance on the benefits of using
of standard operating language or good practices separate from three-part communications Clarify for operators when communications are mission critical and when prescriptive forms impede reliability
3 Provide clear interpretations of the relevant reliability standards so that there is certainty for directives and associated communication actions
1 RCWG investigates and documents other industryrsquos experience and use of communications Report Q4 2012
2 RCWG develops guidelines on benefits from standard communication approaches Detail the use of communications to improve while not reducing reliability Q3 2013
3 Operating Committee works with NERCrsquos Compliance Operations on Compliance Application Notices (CAN) to eliminate ambiguous terms used in operations Q2 2012
4
Rig
ht-
of-
way
m
ain
ten
ance
Operating Committee (Primary Technical Committee ndash not determined)
Measurably improved right-of-way maintenance
Ensure that ROW maintenance practices result incompliance with FAC-003-2 requirements thereby maintaining reliability
High 1 Document actions undertaken that
address the facility ratings Alert results Leverage the North American Transmission Forum work for planning calculationsratings
2 Provide guidance for operational coordination among operating units TOPs RCs and BAs for different situations
1 Subgroup formed in collaboration with NERC and the Regional Entities along with the North American Transmission forum to document the result of the FAC-003-2 plans to develop industry guidance and action Q4 2011
2 Subgroup should develop guidelines for coordination among TOPs RCs and BAs Q4 2012
Action Plan
Reliability Issues Coordinated Action Plan June 2011 9
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
Standards Committee NERC Reliability Standards
Prepare and achieve approval of Reliability Standard for Transmission Vegetation Management
Low 1 FAC-003-2 ndash Transmission Vegetation
Management 1 BOT eta Q3 2011
5
Ch
angi
ng
reso
urc
e m
ix
Planning Committee
Reliability Assessment Subcommittee
Integration of Variable Generation Task Force
Smart Grid Task Force
Ready industry for the changing resource mix and technology integration by providing guidance and input into NERCrsquos Reliability Standards
Unprecedented change in resource mix being realized through retirement of aging units capital fuel costs along with environmental regulations This change along with technological advances in communications and control can change the well understood character of the bulk power system requiring changes in the planning approaches to ensure operational reliability
Medium 1 IVGTF ndash addressing frequency voltage
response resource flexibility contingency reserves
2 SGTF ndash addressing reliability impacts 3 RIS-RAS - addressing scenarios resource
mix planning probabilistic assessments 4 Scenarios that address resource mix
implications such as natural gas interdependence
5 Evaluate benefit of probabilistic metrics and provide guidance to plannersoperators
6 Develop targetsmetricsrefinements for planningoperation
7 Provide guidance on tools for operators 8 Develop potential standards proposals
or guidanceadvisories that enhance reliability
9 Provide recommendations for expanded planning assessments to address resource mix changes
1 through 13 See Planning Committeersquos Strategic Plan
3
and Action Plan4
3 through 6 Resource Issues and Reliability Assessment Subcommittees
Annual Summer Reliability Assessment
Annual Winter Reliability Assessment
Annual Long-Term Reliability Assessment o Scenarios o Emerging Issues o Probabilistic
3 httpwwwnerccomdocspcAgendaItem_5a_PC_2011-2016_Strategic_Plan_v5_LINKpdf
4 httpwwwnerccomdocspcAgendaItem_5ai_PC_Strategic_Plan_Next20Steps2020Future20Work20Plan_v5_LINKpdf
Action Plan
Reliability Issues Coordinated Action Plan June 2011 10
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
6
Inte
grat
ion
of
new
te
chn
olo
gies
Planning Committee
Smart Grid Task Force
Reliability Assessment Subcommittee
10 Smart Grid impacts from distribution
systems (Address cyber aspects in 8 Non-Traditional Threats via Cyber-Security Vulnerabilities)
11 IVGTF dealing with distribution (renewables EV and conventional) resource integration
12 DRDTF addressing high levels of demand response integration
13 TIS and SPCS will provide guidance for modeling and controls systems managementcoordination
Assessment
7
Pre
par
edn
ess
for
hig
h
imp
act
low
fre
qu
ency
ev
ents
Planning Committee
Spare Equipment Database Task Force
Geomagnetic Disturbance Task Force
Operating Committee
Severe Impact Resilience Task Force
Critical Infrastructure Protection Committee
Cyber Attack Task Force
Address the risks from selected high impact low frequency events which can have unacceptable consequences on bulk power system reliability
The bulk power system has significant amounts of built-in resiliency However it has been planned and operated with the known risks to successfully manage system performance With changing threats from cyber physical and new facts about GMD industry will adjust their planning and operational activities to address these evolving risks
High 1 The Electricity Subsector Coordinating
Council has developed a BOT approved Critical Infrastructure Strategic Roadmap
5 in Q4 2010
2 The technical Committees have developed a Critical Infrastructure Strategic Initiatives Coordinated Action Plan
6 BOT approved in Q4 2010
1-2 Covered in the technical committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan
5 httpwwwnerccomdocsesccESCC_Critical_Infrastructure_Strategic_Roadmappdf
6 httpwwwnerccomdocsciscapCritical_Infrastructure_Strategic_Initiatives_Coordinated_Action_Plan_BOT_Apprd_11-2010pdf
Action Plan
Reliability Issues Coordinated Action Plan June 2011 11
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
8
No
n-t
rad
itio
nal
th
reat
s vi
a cy
ber
-se
curi
ty
vuln
erab
iliti
es
Critical Infrastructure Protection Committee
A resilient system fortified by industry planning and operational practices
The continuously evolving threat from cyber-security vulnerabilities requires new processes and procedures both for system planning and operations Industry awareness and cooperation with governmental jurisdictions are key aspects for this improved situational awareness
High
1 Also part of the deliverables in item 7 Preparedness for High Impact Low Frequency events
2 Metric development to measure cyber strength being developed with the Planning Committeersquos Smart Grid Task Force (SGTF)
3 Ongoing industry Alerts as required 4 Guidelines required to advise industry on
the establishment of appropriate cyber-security programs in their organizations
1 Covered in the technical
committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan
2 See Planning Committeersquos Strategic Plan and Action Plan along with the work plan for the SGTF
7
3 See NERCrsquos Alert website8
4 A subgroup formed to develop guidelines reviewing other industryrsquos to take advantage of existing knowledge 2012 Q4
7 httpwwwnerccomfilesSGTF_Report_Final_posted_v11pdf
8 httpwwwnerccompagephpcid=5|63
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
12
AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess
Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the
following list and abstract description was developed
1 Misoperations of relay protection and control systems ndash Nearly all major system failures
excluding perhaps those caused by severe weather have misoperations of relays or
automatic controls as a factor contributing to the propagation of the failure Protection
systems are designed to operate reliably when needed under the presence of a fault on the
system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without
allowing the fault to transfer into adjoining facilities The greater the number of facilities
involved in an event the more severe the impact to the rest of the bulk power system with
cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout
being the extreme Relays can misoperate either operate when not needed or fail to
operate when needed for a number of reasons First the device could experience an
internal failure ndash but this is rare Most commonly relays fail to operate correctly due to
incorrect settings improper coordination (of timing and set points) with other devices
ineffective maintenance and testing or failure of communications channels or power
supplies Preventable errors can be introduced by field personnel and their supervisors or
more programmatically by the organization Adding to the risk is that system protection is
an extremely complex engineering field ndashthere are many practitioners but few masters
2 Human errors by field personnel ndash Field personnel play an important role in the
maintenance and operation of the bulk power system They often are switching equipment
in and out of service and aligning alternative configurations Risks can be introduced when
field personnel operate equipment in a manner that reduces the redundancy of the bulk
power system sometimes even creating single points of failure that would not exist
normally Taking outages of equipment to conduct maintenance is a routine and necessary
part of reliable bulk power system operation However any alterations to the configuration
of the network must be carefully planned in advance to minimize loss of redundancy and
avoid unintended single points of failure It is also important that such changes and risks be
communicated to system operators and reliability coordinators in advance so that they can
make adjustments in their operating plans and reliability assessments
3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system
operators and reliability coordinators are comfortable with informal communications with
field and power plant personnel and neighboring systems Experience from analyzing
various events indicates there is often a sense of awkwardness when personnel transition
from conversational discussion to issuing reliability instructions It is also human nature to
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
13
be uncomfortable in applying formal communication procedures after personnel have
developed informal styles over many years Confusion in making the transition from normal
conversation to formal communications can introduce misunderstandings and possibly even
incorrect actions or assumptions Further once the need to transition to more formal
structure is recognized the transition is often not complete or effective Results can include
unclear instructions confusion whether an instruction is a suggestion or a directive whether
specific action is required or a set of alternative actions are permissible and confusion over
what elements of the system are being addressed
4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation
management programs as a key recommendation for avoiding future cascading failures
More broadly any encroachments in the right-of-way that reduce clearances to the point of
lowering facility ratings or reducing the randomness of possible contacts can be a risk to
reliability Although these impacts may not always be readily apparent under extreme wind
and temperature conditions they may become more of a risk to bulk power system
reliability There are many challenges to effective right-of-way maintenance especially
maintaining proper clearances including interventions by private landowners local
municipalities and federal and state landowners
5 Changing resource mix ndash Energy and environmental policies along with energy markets are
driving proposals toward unprecedented changes in the resource mix of the bulk power
system Examples include integration of significant amounts of renewable (variable such as
wind and solar) natural gas storage and demand resources to provide energy and capacity
Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a
century of operational experience with the existing resource mix However integration of
these new resources results in operating characteristics significantly different from
conventional steam production facilities An array of reliability services must be provided
over a range of time horizons from seconds to minutes to hours and days and annually such
as load following contingency reserves frequency response reactive supply capacity and
voltage control and power system stability Continued reliable operation of the bulk power
system will require an industry dialog with policymakers and regulators Understanding the
impacts on reliability will depend on accurate modeling of new resources and development
of new methods and tools for the provision of essential reliability services
6 Integration of new technologies ndash Introduction of electric vehicles demand-side
management variable generation distributed resources and smart grid technologies
presents tremendous opportunities but also introduces changes to the operating
characteristics of the bulk power system Integration of these new technologies requires
changes in the way the bulk power system is planned and operated to maintain reliability
Further additional toolsmodels are required to support their integration to meet policy and
strategic goals Without these changes it will be challenging to maintain reliability with
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
14
large-scale deployments For example some smart grid devicessystems increase exposure
to cyber threats while variable generation requires additional ancillary services Integration
of these new technologies must be achieved in a manner that does not undermine existing
levels of stability resilience and security of the bulk power system
7 Preparedness for high impact low frequency events ndash Although there is a wide range of
threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for
possible events that could debilitate the bulk power system for extended periods such as
widespread coordinated physicalcyber attacks or geomagnetic storms The industry must
consider improving the design of the bulk power system to address these potential risks and
prepare coordinated North American response plans for use during catastrophic events and
be ready to deploy those plans to restore essential services in a timely manner
8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-
based programs policies and processes to prepare for react to and recover from cyber
security vulnerabilities is a high priority for the industry The bulk power system has not yet
experienced wide-spread cyber-attacks and a contributing factor has been the traditional
physical separation between the industrial control systemSCADA environment and the
business and administrative networks This situation however is rapidly changing
predominantly due to the efficiencies that can be achieved by leveraging shared networks
and resources so now even physically separated environments are susceptible For example
the bulk power system could be as vulnerable to digital threats as IT systems but with far
more critical implications as the recent Stuxnet virus has shown Disabling or turning
systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial
control system software can be changed and data can be stolen without intrusions even
being detected These injection vectors serve as a blueprint for future attackers who wish to
access controllers safety systems and protection devices to insert malicious code targeting
changes to set points and switches as well as alteration or suppression of measurements
Standing Committee Coordination Group Roster
Reliability Issues Coordinated Action Plan
June 2011
15
SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr
Position
Name Title
Company City StateProvince
Phone E-mail
CCC Chair W Clay Smith
2100 East Exchange Place Tucker Georgia 30084-5336
(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom
CCC Vice Chair Terry L Bilke
Director Standards and Compliance
Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202
317 249-5463 317 249-5358 Fax tbilkemidwestisoorg
CCC Vice Chair Brett Hallborg
Manager of Operations Training
BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2
(604) 455-1778 bretthallborgbchydroc
om
CIPC Chair Barry Lawson
Manager Power Delivery
National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203
(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo
p
CIPC Vice Chair Cyber
Charles F Abell PE Supervising Engineer
Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103
(314) 554-3817 (314) 206-0046 Fx cfabellamerencom
CIPC Vice Chair Physical Security
Robert D Canada Business Assurance Principal
Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308
(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom
OC Chair JS Holeman
Director System Operations
Duke Energy
(704) 382-0011 SamHolemanduke-energycom
Action Plan
Reliability Issues Coordinated Action Plan June 2011 16
Position
Name Title
Company City StateProvince
Phone E-mail
OC Vice Chair Tom Bowe
Executive Director of Compliance
PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403
610-666-4776 (610) 666-4287 Fx bowetpjmcom
PC Chair Tom Burgess
Director FERC Compliance
FirstEnergy Corp
330-384-5225 burgesstfirstenergycorpcom
PC Vice Chair Jeffrey L Mitchell
Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333
(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg
PCGC Chair Jacob Burger
Transmission System Control Coordinator
Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832
(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom
SC Chair Allen Mosher
Senior Director of Policy Analysis and Reliability
American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715
(202) 467-2944 (202) 467-2992 Fx amosherappanetorg
SC Vice Chair PS (Ben) Li
President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6
(647) 388-1498 (905) 887-2235 Fx benbenlica
REMG Representative
Edward A Schwerdt President and CEO
Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703
(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg
NERC Staff Roster
Reliability Issues Coordinated Action Plan
June 2011
17
NNEERRCC SSttaaffff RRoosstteerr
Position
Name Title
PhoneE-mail
NERC Staff Alvin J (AJ) Connor
Manager of Power System Analysis (609) 751-2579 ajconnornercnet
NERC Staff Tom Galloway
Senior Vice President and Chief Reliability Officer
(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet
NERC Staff Brian M Harrell
Manager of CIP Standards Training and Awareness
(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet
NERC Staff Larry J Kezele
Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet
NERC Staff Mark G Lauby
Vice President and Director of Reliability Assessment and Performance Analysis
(609) 452-8060 (609) 452-9550 Fax marklaubynercnet
NERC Staff Maureen E Long
Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet
NERC Staff Scott R Mix
CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet
NERC Staff Michael Moon
Director of Compliance Operations
(404) 446-2560 michaelmoonnercnet
NERC Staff Andrew Rodriquez Director of Standards Development
(404) 446-2560 andyrodriqueznercnet
NERC Staff Peter Knoetgen Director of Training and Accreditation
404-446-9688 peterknoetgennercnet
NERC Staff Herb Schrayshuen
Vice President and Director of Standards
((315) 439-1390 herbschrayshuennercnet
NERC Staff Mark Weatherford
Vice President and Chief Security Officer
(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet
Action Plan
Reliability Issues Coordinated Action Plan
June 2011
7
AAccttiioonn PPllaann
The following Action Plan (Table 2) provides Proposed Enhancements Abstract of activity priorities key deliverables and projected milestones
Table 2 Reliability Issues Action Plan
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
1
Mis
op
erat
ion
s o
f re
lay
pro
tect
ion
an
d c
on
tro
l sys
tem
s
Standards Committee
NERC Reliability Standards
Prepare and achieve approval Reliability Standards that minimize relay control system misoperations
High 1 PRC-005 Protection System
Maintenance 2 PRC-004 Protection System Misoperation
Identification and Correction (Rapid Development Pilot)
3 PRC-024 Generator Performance During Frequency and Voltage Excursions
4 PRC-019 Coordination of Generator Voltage Regulator Controls with Unit Capabilities and Protection
5 PRC-001 Protection System Coordination
1 BOT eta Q3 2011 2 BOT eta Q2 2012 3 BOT eta Q2 2012
4 BOT eta Q4 2012
5 BOT eta Q1 2013
Planning Committee System Protection amp Control Subcommittee
Reliability Metrics Working Group
Provide tools for improvement and measure trends
Enhancing the available tools to planners and operators and measuring trends will support industry efforts to improve
High
1 Guidance for relay maintenance and adequacy of protection engineering
2 Metrics that measure relaycontrol system misoperation
1 SPCS deliver Guide Q2 2012
2 RMWG develops metrics Q4 2011 TADSWG collects data as needed
Low 3 Address ways to enhance operator trainingrelay knowledge
3 SPCS in collaboration with the OCrsquos Personnel Subcommittee deliver tutorial for OC review Q4 2013
2
Hu
man
er
rors
by
fiel
d
per
son
nel
Operating Committee Personnel Subcommittee
Developing root causes lessons learned and guidance on processes can shape industry improvement opportunities
Enhancing industry knowledge of failure modes can improve reliability Standard development on operator training can help ensure successful implementation of recommendations
High 1 Develop guidance for root cause aspects
ndash including planningmanagement decisions
2 Develop refined cause codes to capture root cause
3 Develop processes that lead to quicker sharing of lessons learned
4 Develop guidance on tools development (man‐machine interfacedesign)
1 EAWG develop root cause guidebook by Q4 2012
2 EAWG to develop cause codes by Q4 2013
3 EAWG to streamline lessons learned process by Q4 2011
4 RCWG to create tools development guidebook Q4 2014
Action Plan
Reliability Issues Coordinated Action Plan June 2011 8
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
Medium 5 Develop process guidance for task design
(process resolutions plan the work and work the plan)
6 Support Personnel Training Standard
5 Personnel Subcommittee to prioritize and develop task design guidance Q3 2012
6 Personnel Subcommittee to develop SAR by Q4 2012
3
Am
big
uo
us
or
inco
mp
lete
vo
ice
com
mu
nic
atio
n
Standards Committee NERC Reliability Standards
Prepare and approve Reliability Standards that address communications
High 1 COM-002-3 ndash Communications and
Coordination Standard 2 COM-003-1 ndash Operating Personnel
Communications Protocols Standard
1 BOT eta Q1 2012
2 BOT eta Q4 2012
Operating Committee
Measurably improved communications in system operations
Provide guidance clarifying for operators the role of communications in improvement of reliability Should be a subset of 2 (good practices training deliverables etc)
Medium 1 Use other industries for guidance 2 Provide guidance on the benefits of using
of standard operating language or good practices separate from three-part communications Clarify for operators when communications are mission critical and when prescriptive forms impede reliability
3 Provide clear interpretations of the relevant reliability standards so that there is certainty for directives and associated communication actions
1 RCWG investigates and documents other industryrsquos experience and use of communications Report Q4 2012
2 RCWG develops guidelines on benefits from standard communication approaches Detail the use of communications to improve while not reducing reliability Q3 2013
3 Operating Committee works with NERCrsquos Compliance Operations on Compliance Application Notices (CAN) to eliminate ambiguous terms used in operations Q2 2012
4
Rig
ht-
of-
way
m
ain
ten
ance
Operating Committee (Primary Technical Committee ndash not determined)
Measurably improved right-of-way maintenance
Ensure that ROW maintenance practices result incompliance with FAC-003-2 requirements thereby maintaining reliability
High 1 Document actions undertaken that
address the facility ratings Alert results Leverage the North American Transmission Forum work for planning calculationsratings
2 Provide guidance for operational coordination among operating units TOPs RCs and BAs for different situations
1 Subgroup formed in collaboration with NERC and the Regional Entities along with the North American Transmission forum to document the result of the FAC-003-2 plans to develop industry guidance and action Q4 2011
2 Subgroup should develop guidelines for coordination among TOPs RCs and BAs Q4 2012
Action Plan
Reliability Issues Coordinated Action Plan June 2011 9
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
Standards Committee NERC Reliability Standards
Prepare and achieve approval of Reliability Standard for Transmission Vegetation Management
Low 1 FAC-003-2 ndash Transmission Vegetation
Management 1 BOT eta Q3 2011
5
Ch
angi
ng
reso
urc
e m
ix
Planning Committee
Reliability Assessment Subcommittee
Integration of Variable Generation Task Force
Smart Grid Task Force
Ready industry for the changing resource mix and technology integration by providing guidance and input into NERCrsquos Reliability Standards
Unprecedented change in resource mix being realized through retirement of aging units capital fuel costs along with environmental regulations This change along with technological advances in communications and control can change the well understood character of the bulk power system requiring changes in the planning approaches to ensure operational reliability
Medium 1 IVGTF ndash addressing frequency voltage
response resource flexibility contingency reserves
2 SGTF ndash addressing reliability impacts 3 RIS-RAS - addressing scenarios resource
mix planning probabilistic assessments 4 Scenarios that address resource mix
implications such as natural gas interdependence
5 Evaluate benefit of probabilistic metrics and provide guidance to plannersoperators
6 Develop targetsmetricsrefinements for planningoperation
7 Provide guidance on tools for operators 8 Develop potential standards proposals
or guidanceadvisories that enhance reliability
9 Provide recommendations for expanded planning assessments to address resource mix changes
1 through 13 See Planning Committeersquos Strategic Plan
3
and Action Plan4
3 through 6 Resource Issues and Reliability Assessment Subcommittees
Annual Summer Reliability Assessment
Annual Winter Reliability Assessment
Annual Long-Term Reliability Assessment o Scenarios o Emerging Issues o Probabilistic
3 httpwwwnerccomdocspcAgendaItem_5a_PC_2011-2016_Strategic_Plan_v5_LINKpdf
4 httpwwwnerccomdocspcAgendaItem_5ai_PC_Strategic_Plan_Next20Steps2020Future20Work20Plan_v5_LINKpdf
Action Plan
Reliability Issues Coordinated Action Plan June 2011 10
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
6
Inte
grat
ion
of
new
te
chn
olo
gies
Planning Committee
Smart Grid Task Force
Reliability Assessment Subcommittee
10 Smart Grid impacts from distribution
systems (Address cyber aspects in 8 Non-Traditional Threats via Cyber-Security Vulnerabilities)
11 IVGTF dealing with distribution (renewables EV and conventional) resource integration
12 DRDTF addressing high levels of demand response integration
13 TIS and SPCS will provide guidance for modeling and controls systems managementcoordination
Assessment
7
Pre
par
edn
ess
for
hig
h
imp
act
low
fre
qu
ency
ev
ents
Planning Committee
Spare Equipment Database Task Force
Geomagnetic Disturbance Task Force
Operating Committee
Severe Impact Resilience Task Force
Critical Infrastructure Protection Committee
Cyber Attack Task Force
Address the risks from selected high impact low frequency events which can have unacceptable consequences on bulk power system reliability
The bulk power system has significant amounts of built-in resiliency However it has been planned and operated with the known risks to successfully manage system performance With changing threats from cyber physical and new facts about GMD industry will adjust their planning and operational activities to address these evolving risks
High 1 The Electricity Subsector Coordinating
Council has developed a BOT approved Critical Infrastructure Strategic Roadmap
5 in Q4 2010
2 The technical Committees have developed a Critical Infrastructure Strategic Initiatives Coordinated Action Plan
6 BOT approved in Q4 2010
1-2 Covered in the technical committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan
5 httpwwwnerccomdocsesccESCC_Critical_Infrastructure_Strategic_Roadmappdf
6 httpwwwnerccomdocsciscapCritical_Infrastructure_Strategic_Initiatives_Coordinated_Action_Plan_BOT_Apprd_11-2010pdf
Action Plan
Reliability Issues Coordinated Action Plan June 2011 11
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
8
No
n-t
rad
itio
nal
th
reat
s vi
a cy
ber
-se
curi
ty
vuln
erab
iliti
es
Critical Infrastructure Protection Committee
A resilient system fortified by industry planning and operational practices
The continuously evolving threat from cyber-security vulnerabilities requires new processes and procedures both for system planning and operations Industry awareness and cooperation with governmental jurisdictions are key aspects for this improved situational awareness
High
1 Also part of the deliverables in item 7 Preparedness for High Impact Low Frequency events
2 Metric development to measure cyber strength being developed with the Planning Committeersquos Smart Grid Task Force (SGTF)
3 Ongoing industry Alerts as required 4 Guidelines required to advise industry on
the establishment of appropriate cyber-security programs in their organizations
1 Covered in the technical
committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan
2 See Planning Committeersquos Strategic Plan and Action Plan along with the work plan for the SGTF
7
3 See NERCrsquos Alert website8
4 A subgroup formed to develop guidelines reviewing other industryrsquos to take advantage of existing knowledge 2012 Q4
7 httpwwwnerccomfilesSGTF_Report_Final_posted_v11pdf
8 httpwwwnerccompagephpcid=5|63
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
12
AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess
Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the
following list and abstract description was developed
1 Misoperations of relay protection and control systems ndash Nearly all major system failures
excluding perhaps those caused by severe weather have misoperations of relays or
automatic controls as a factor contributing to the propagation of the failure Protection
systems are designed to operate reliably when needed under the presence of a fault on the
system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without
allowing the fault to transfer into adjoining facilities The greater the number of facilities
involved in an event the more severe the impact to the rest of the bulk power system with
cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout
being the extreme Relays can misoperate either operate when not needed or fail to
operate when needed for a number of reasons First the device could experience an
internal failure ndash but this is rare Most commonly relays fail to operate correctly due to
incorrect settings improper coordination (of timing and set points) with other devices
ineffective maintenance and testing or failure of communications channels or power
supplies Preventable errors can be introduced by field personnel and their supervisors or
more programmatically by the organization Adding to the risk is that system protection is
an extremely complex engineering field ndashthere are many practitioners but few masters
2 Human errors by field personnel ndash Field personnel play an important role in the
maintenance and operation of the bulk power system They often are switching equipment
in and out of service and aligning alternative configurations Risks can be introduced when
field personnel operate equipment in a manner that reduces the redundancy of the bulk
power system sometimes even creating single points of failure that would not exist
normally Taking outages of equipment to conduct maintenance is a routine and necessary
part of reliable bulk power system operation However any alterations to the configuration
of the network must be carefully planned in advance to minimize loss of redundancy and
avoid unintended single points of failure It is also important that such changes and risks be
communicated to system operators and reliability coordinators in advance so that they can
make adjustments in their operating plans and reliability assessments
3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system
operators and reliability coordinators are comfortable with informal communications with
field and power plant personnel and neighboring systems Experience from analyzing
various events indicates there is often a sense of awkwardness when personnel transition
from conversational discussion to issuing reliability instructions It is also human nature to
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
13
be uncomfortable in applying formal communication procedures after personnel have
developed informal styles over many years Confusion in making the transition from normal
conversation to formal communications can introduce misunderstandings and possibly even
incorrect actions or assumptions Further once the need to transition to more formal
structure is recognized the transition is often not complete or effective Results can include
unclear instructions confusion whether an instruction is a suggestion or a directive whether
specific action is required or a set of alternative actions are permissible and confusion over
what elements of the system are being addressed
4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation
management programs as a key recommendation for avoiding future cascading failures
More broadly any encroachments in the right-of-way that reduce clearances to the point of
lowering facility ratings or reducing the randomness of possible contacts can be a risk to
reliability Although these impacts may not always be readily apparent under extreme wind
and temperature conditions they may become more of a risk to bulk power system
reliability There are many challenges to effective right-of-way maintenance especially
maintaining proper clearances including interventions by private landowners local
municipalities and federal and state landowners
5 Changing resource mix ndash Energy and environmental policies along with energy markets are
driving proposals toward unprecedented changes in the resource mix of the bulk power
system Examples include integration of significant amounts of renewable (variable such as
wind and solar) natural gas storage and demand resources to provide energy and capacity
Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a
century of operational experience with the existing resource mix However integration of
these new resources results in operating characteristics significantly different from
conventional steam production facilities An array of reliability services must be provided
over a range of time horizons from seconds to minutes to hours and days and annually such
as load following contingency reserves frequency response reactive supply capacity and
voltage control and power system stability Continued reliable operation of the bulk power
system will require an industry dialog with policymakers and regulators Understanding the
impacts on reliability will depend on accurate modeling of new resources and development
of new methods and tools for the provision of essential reliability services
6 Integration of new technologies ndash Introduction of electric vehicles demand-side
management variable generation distributed resources and smart grid technologies
presents tremendous opportunities but also introduces changes to the operating
characteristics of the bulk power system Integration of these new technologies requires
changes in the way the bulk power system is planned and operated to maintain reliability
Further additional toolsmodels are required to support their integration to meet policy and
strategic goals Without these changes it will be challenging to maintain reliability with
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
14
large-scale deployments For example some smart grid devicessystems increase exposure
to cyber threats while variable generation requires additional ancillary services Integration
of these new technologies must be achieved in a manner that does not undermine existing
levels of stability resilience and security of the bulk power system
7 Preparedness for high impact low frequency events ndash Although there is a wide range of
threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for
possible events that could debilitate the bulk power system for extended periods such as
widespread coordinated physicalcyber attacks or geomagnetic storms The industry must
consider improving the design of the bulk power system to address these potential risks and
prepare coordinated North American response plans for use during catastrophic events and
be ready to deploy those plans to restore essential services in a timely manner
8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-
based programs policies and processes to prepare for react to and recover from cyber
security vulnerabilities is a high priority for the industry The bulk power system has not yet
experienced wide-spread cyber-attacks and a contributing factor has been the traditional
physical separation between the industrial control systemSCADA environment and the
business and administrative networks This situation however is rapidly changing
predominantly due to the efficiencies that can be achieved by leveraging shared networks
and resources so now even physically separated environments are susceptible For example
the bulk power system could be as vulnerable to digital threats as IT systems but with far
more critical implications as the recent Stuxnet virus has shown Disabling or turning
systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial
control system software can be changed and data can be stolen without intrusions even
being detected These injection vectors serve as a blueprint for future attackers who wish to
access controllers safety systems and protection devices to insert malicious code targeting
changes to set points and switches as well as alteration or suppression of measurements
Standing Committee Coordination Group Roster
Reliability Issues Coordinated Action Plan
June 2011
15
SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr
Position
Name Title
Company City StateProvince
Phone E-mail
CCC Chair W Clay Smith
2100 East Exchange Place Tucker Georgia 30084-5336
(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom
CCC Vice Chair Terry L Bilke
Director Standards and Compliance
Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202
317 249-5463 317 249-5358 Fax tbilkemidwestisoorg
CCC Vice Chair Brett Hallborg
Manager of Operations Training
BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2
(604) 455-1778 bretthallborgbchydroc
om
CIPC Chair Barry Lawson
Manager Power Delivery
National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203
(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo
p
CIPC Vice Chair Cyber
Charles F Abell PE Supervising Engineer
Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103
(314) 554-3817 (314) 206-0046 Fx cfabellamerencom
CIPC Vice Chair Physical Security
Robert D Canada Business Assurance Principal
Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308
(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom
OC Chair JS Holeman
Director System Operations
Duke Energy
(704) 382-0011 SamHolemanduke-energycom
Action Plan
Reliability Issues Coordinated Action Plan June 2011 16
Position
Name Title
Company City StateProvince
Phone E-mail
OC Vice Chair Tom Bowe
Executive Director of Compliance
PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403
610-666-4776 (610) 666-4287 Fx bowetpjmcom
PC Chair Tom Burgess
Director FERC Compliance
FirstEnergy Corp
330-384-5225 burgesstfirstenergycorpcom
PC Vice Chair Jeffrey L Mitchell
Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333
(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg
PCGC Chair Jacob Burger
Transmission System Control Coordinator
Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832
(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom
SC Chair Allen Mosher
Senior Director of Policy Analysis and Reliability
American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715
(202) 467-2944 (202) 467-2992 Fx amosherappanetorg
SC Vice Chair PS (Ben) Li
President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6
(647) 388-1498 (905) 887-2235 Fx benbenlica
REMG Representative
Edward A Schwerdt President and CEO
Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703
(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg
NERC Staff Roster
Reliability Issues Coordinated Action Plan
June 2011
17
NNEERRCC SSttaaffff RRoosstteerr
Position
Name Title
PhoneE-mail
NERC Staff Alvin J (AJ) Connor
Manager of Power System Analysis (609) 751-2579 ajconnornercnet
NERC Staff Tom Galloway
Senior Vice President and Chief Reliability Officer
(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet
NERC Staff Brian M Harrell
Manager of CIP Standards Training and Awareness
(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet
NERC Staff Larry J Kezele
Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet
NERC Staff Mark G Lauby
Vice President and Director of Reliability Assessment and Performance Analysis
(609) 452-8060 (609) 452-9550 Fax marklaubynercnet
NERC Staff Maureen E Long
Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet
NERC Staff Scott R Mix
CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet
NERC Staff Michael Moon
Director of Compliance Operations
(404) 446-2560 michaelmoonnercnet
NERC Staff Andrew Rodriquez Director of Standards Development
(404) 446-2560 andyrodriqueznercnet
NERC Staff Peter Knoetgen Director of Training and Accreditation
404-446-9688 peterknoetgennercnet
NERC Staff Herb Schrayshuen
Vice President and Director of Standards
((315) 439-1390 herbschrayshuennercnet
NERC Staff Mark Weatherford
Vice President and Chief Security Officer
(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet
Action Plan
Reliability Issues Coordinated Action Plan June 2011 8
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
Medium 5 Develop process guidance for task design
(process resolutions plan the work and work the plan)
6 Support Personnel Training Standard
5 Personnel Subcommittee to prioritize and develop task design guidance Q3 2012
6 Personnel Subcommittee to develop SAR by Q4 2012
3
Am
big
uo
us
or
inco
mp
lete
vo
ice
com
mu
nic
atio
n
Standards Committee NERC Reliability Standards
Prepare and approve Reliability Standards that address communications
High 1 COM-002-3 ndash Communications and
Coordination Standard 2 COM-003-1 ndash Operating Personnel
Communications Protocols Standard
1 BOT eta Q1 2012
2 BOT eta Q4 2012
Operating Committee
Measurably improved communications in system operations
Provide guidance clarifying for operators the role of communications in improvement of reliability Should be a subset of 2 (good practices training deliverables etc)
Medium 1 Use other industries for guidance 2 Provide guidance on the benefits of using
of standard operating language or good practices separate from three-part communications Clarify for operators when communications are mission critical and when prescriptive forms impede reliability
3 Provide clear interpretations of the relevant reliability standards so that there is certainty for directives and associated communication actions
1 RCWG investigates and documents other industryrsquos experience and use of communications Report Q4 2012
2 RCWG develops guidelines on benefits from standard communication approaches Detail the use of communications to improve while not reducing reliability Q3 2013
3 Operating Committee works with NERCrsquos Compliance Operations on Compliance Application Notices (CAN) to eliminate ambiguous terms used in operations Q2 2012
4
Rig
ht-
of-
way
m
ain
ten
ance
Operating Committee (Primary Technical Committee ndash not determined)
Measurably improved right-of-way maintenance
Ensure that ROW maintenance practices result incompliance with FAC-003-2 requirements thereby maintaining reliability
High 1 Document actions undertaken that
address the facility ratings Alert results Leverage the North American Transmission Forum work for planning calculationsratings
2 Provide guidance for operational coordination among operating units TOPs RCs and BAs for different situations
1 Subgroup formed in collaboration with NERC and the Regional Entities along with the North American Transmission forum to document the result of the FAC-003-2 plans to develop industry guidance and action Q4 2011
2 Subgroup should develop guidelines for coordination among TOPs RCs and BAs Q4 2012
Action Plan
Reliability Issues Coordinated Action Plan June 2011 9
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
Standards Committee NERC Reliability Standards
Prepare and achieve approval of Reliability Standard for Transmission Vegetation Management
Low 1 FAC-003-2 ndash Transmission Vegetation
Management 1 BOT eta Q3 2011
5
Ch
angi
ng
reso
urc
e m
ix
Planning Committee
Reliability Assessment Subcommittee
Integration of Variable Generation Task Force
Smart Grid Task Force
Ready industry for the changing resource mix and technology integration by providing guidance and input into NERCrsquos Reliability Standards
Unprecedented change in resource mix being realized through retirement of aging units capital fuel costs along with environmental regulations This change along with technological advances in communications and control can change the well understood character of the bulk power system requiring changes in the planning approaches to ensure operational reliability
Medium 1 IVGTF ndash addressing frequency voltage
response resource flexibility contingency reserves
2 SGTF ndash addressing reliability impacts 3 RIS-RAS - addressing scenarios resource
mix planning probabilistic assessments 4 Scenarios that address resource mix
implications such as natural gas interdependence
5 Evaluate benefit of probabilistic metrics and provide guidance to plannersoperators
6 Develop targetsmetricsrefinements for planningoperation
7 Provide guidance on tools for operators 8 Develop potential standards proposals
or guidanceadvisories that enhance reliability
9 Provide recommendations for expanded planning assessments to address resource mix changes
1 through 13 See Planning Committeersquos Strategic Plan
3
and Action Plan4
3 through 6 Resource Issues and Reliability Assessment Subcommittees
Annual Summer Reliability Assessment
Annual Winter Reliability Assessment
Annual Long-Term Reliability Assessment o Scenarios o Emerging Issues o Probabilistic
3 httpwwwnerccomdocspcAgendaItem_5a_PC_2011-2016_Strategic_Plan_v5_LINKpdf
4 httpwwwnerccomdocspcAgendaItem_5ai_PC_Strategic_Plan_Next20Steps2020Future20Work20Plan_v5_LINKpdf
Action Plan
Reliability Issues Coordinated Action Plan June 2011 10
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
6
Inte
grat
ion
of
new
te
chn
olo
gies
Planning Committee
Smart Grid Task Force
Reliability Assessment Subcommittee
10 Smart Grid impacts from distribution
systems (Address cyber aspects in 8 Non-Traditional Threats via Cyber-Security Vulnerabilities)
11 IVGTF dealing with distribution (renewables EV and conventional) resource integration
12 DRDTF addressing high levels of demand response integration
13 TIS and SPCS will provide guidance for modeling and controls systems managementcoordination
Assessment
7
Pre
par
edn
ess
for
hig
h
imp
act
low
fre
qu
ency
ev
ents
Planning Committee
Spare Equipment Database Task Force
Geomagnetic Disturbance Task Force
Operating Committee
Severe Impact Resilience Task Force
Critical Infrastructure Protection Committee
Cyber Attack Task Force
Address the risks from selected high impact low frequency events which can have unacceptable consequences on bulk power system reliability
The bulk power system has significant amounts of built-in resiliency However it has been planned and operated with the known risks to successfully manage system performance With changing threats from cyber physical and new facts about GMD industry will adjust their planning and operational activities to address these evolving risks
High 1 The Electricity Subsector Coordinating
Council has developed a BOT approved Critical Infrastructure Strategic Roadmap
5 in Q4 2010
2 The technical Committees have developed a Critical Infrastructure Strategic Initiatives Coordinated Action Plan
6 BOT approved in Q4 2010
1-2 Covered in the technical committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan
5 httpwwwnerccomdocsesccESCC_Critical_Infrastructure_Strategic_Roadmappdf
6 httpwwwnerccomdocsciscapCritical_Infrastructure_Strategic_Initiatives_Coordinated_Action_Plan_BOT_Apprd_11-2010pdf
Action Plan
Reliability Issues Coordinated Action Plan June 2011 11
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
8
No
n-t
rad
itio
nal
th
reat
s vi
a cy
ber
-se
curi
ty
vuln
erab
iliti
es
Critical Infrastructure Protection Committee
A resilient system fortified by industry planning and operational practices
The continuously evolving threat from cyber-security vulnerabilities requires new processes and procedures both for system planning and operations Industry awareness and cooperation with governmental jurisdictions are key aspects for this improved situational awareness
High
1 Also part of the deliverables in item 7 Preparedness for High Impact Low Frequency events
2 Metric development to measure cyber strength being developed with the Planning Committeersquos Smart Grid Task Force (SGTF)
3 Ongoing industry Alerts as required 4 Guidelines required to advise industry on
the establishment of appropriate cyber-security programs in their organizations
1 Covered in the technical
committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan
2 See Planning Committeersquos Strategic Plan and Action Plan along with the work plan for the SGTF
7
3 See NERCrsquos Alert website8
4 A subgroup formed to develop guidelines reviewing other industryrsquos to take advantage of existing knowledge 2012 Q4
7 httpwwwnerccomfilesSGTF_Report_Final_posted_v11pdf
8 httpwwwnerccompagephpcid=5|63
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
12
AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess
Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the
following list and abstract description was developed
1 Misoperations of relay protection and control systems ndash Nearly all major system failures
excluding perhaps those caused by severe weather have misoperations of relays or
automatic controls as a factor contributing to the propagation of the failure Protection
systems are designed to operate reliably when needed under the presence of a fault on the
system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without
allowing the fault to transfer into adjoining facilities The greater the number of facilities
involved in an event the more severe the impact to the rest of the bulk power system with
cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout
being the extreme Relays can misoperate either operate when not needed or fail to
operate when needed for a number of reasons First the device could experience an
internal failure ndash but this is rare Most commonly relays fail to operate correctly due to
incorrect settings improper coordination (of timing and set points) with other devices
ineffective maintenance and testing or failure of communications channels or power
supplies Preventable errors can be introduced by field personnel and their supervisors or
more programmatically by the organization Adding to the risk is that system protection is
an extremely complex engineering field ndashthere are many practitioners but few masters
2 Human errors by field personnel ndash Field personnel play an important role in the
maintenance and operation of the bulk power system They often are switching equipment
in and out of service and aligning alternative configurations Risks can be introduced when
field personnel operate equipment in a manner that reduces the redundancy of the bulk
power system sometimes even creating single points of failure that would not exist
normally Taking outages of equipment to conduct maintenance is a routine and necessary
part of reliable bulk power system operation However any alterations to the configuration
of the network must be carefully planned in advance to minimize loss of redundancy and
avoid unintended single points of failure It is also important that such changes and risks be
communicated to system operators and reliability coordinators in advance so that they can
make adjustments in their operating plans and reliability assessments
3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system
operators and reliability coordinators are comfortable with informal communications with
field and power plant personnel and neighboring systems Experience from analyzing
various events indicates there is often a sense of awkwardness when personnel transition
from conversational discussion to issuing reliability instructions It is also human nature to
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
13
be uncomfortable in applying formal communication procedures after personnel have
developed informal styles over many years Confusion in making the transition from normal
conversation to formal communications can introduce misunderstandings and possibly even
incorrect actions or assumptions Further once the need to transition to more formal
structure is recognized the transition is often not complete or effective Results can include
unclear instructions confusion whether an instruction is a suggestion or a directive whether
specific action is required or a set of alternative actions are permissible and confusion over
what elements of the system are being addressed
4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation
management programs as a key recommendation for avoiding future cascading failures
More broadly any encroachments in the right-of-way that reduce clearances to the point of
lowering facility ratings or reducing the randomness of possible contacts can be a risk to
reliability Although these impacts may not always be readily apparent under extreme wind
and temperature conditions they may become more of a risk to bulk power system
reliability There are many challenges to effective right-of-way maintenance especially
maintaining proper clearances including interventions by private landowners local
municipalities and federal and state landowners
5 Changing resource mix ndash Energy and environmental policies along with energy markets are
driving proposals toward unprecedented changes in the resource mix of the bulk power
system Examples include integration of significant amounts of renewable (variable such as
wind and solar) natural gas storage and demand resources to provide energy and capacity
Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a
century of operational experience with the existing resource mix However integration of
these new resources results in operating characteristics significantly different from
conventional steam production facilities An array of reliability services must be provided
over a range of time horizons from seconds to minutes to hours and days and annually such
as load following contingency reserves frequency response reactive supply capacity and
voltage control and power system stability Continued reliable operation of the bulk power
system will require an industry dialog with policymakers and regulators Understanding the
impacts on reliability will depend on accurate modeling of new resources and development
of new methods and tools for the provision of essential reliability services
6 Integration of new technologies ndash Introduction of electric vehicles demand-side
management variable generation distributed resources and smart grid technologies
presents tremendous opportunities but also introduces changes to the operating
characteristics of the bulk power system Integration of these new technologies requires
changes in the way the bulk power system is planned and operated to maintain reliability
Further additional toolsmodels are required to support their integration to meet policy and
strategic goals Without these changes it will be challenging to maintain reliability with
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
14
large-scale deployments For example some smart grid devicessystems increase exposure
to cyber threats while variable generation requires additional ancillary services Integration
of these new technologies must be achieved in a manner that does not undermine existing
levels of stability resilience and security of the bulk power system
7 Preparedness for high impact low frequency events ndash Although there is a wide range of
threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for
possible events that could debilitate the bulk power system for extended periods such as
widespread coordinated physicalcyber attacks or geomagnetic storms The industry must
consider improving the design of the bulk power system to address these potential risks and
prepare coordinated North American response plans for use during catastrophic events and
be ready to deploy those plans to restore essential services in a timely manner
8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-
based programs policies and processes to prepare for react to and recover from cyber
security vulnerabilities is a high priority for the industry The bulk power system has not yet
experienced wide-spread cyber-attacks and a contributing factor has been the traditional
physical separation between the industrial control systemSCADA environment and the
business and administrative networks This situation however is rapidly changing
predominantly due to the efficiencies that can be achieved by leveraging shared networks
and resources so now even physically separated environments are susceptible For example
the bulk power system could be as vulnerable to digital threats as IT systems but with far
more critical implications as the recent Stuxnet virus has shown Disabling or turning
systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial
control system software can be changed and data can be stolen without intrusions even
being detected These injection vectors serve as a blueprint for future attackers who wish to
access controllers safety systems and protection devices to insert malicious code targeting
changes to set points and switches as well as alteration or suppression of measurements
Standing Committee Coordination Group Roster
Reliability Issues Coordinated Action Plan
June 2011
15
SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr
Position
Name Title
Company City StateProvince
Phone E-mail
CCC Chair W Clay Smith
2100 East Exchange Place Tucker Georgia 30084-5336
(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom
CCC Vice Chair Terry L Bilke
Director Standards and Compliance
Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202
317 249-5463 317 249-5358 Fax tbilkemidwestisoorg
CCC Vice Chair Brett Hallborg
Manager of Operations Training
BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2
(604) 455-1778 bretthallborgbchydroc
om
CIPC Chair Barry Lawson
Manager Power Delivery
National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203
(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo
p
CIPC Vice Chair Cyber
Charles F Abell PE Supervising Engineer
Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103
(314) 554-3817 (314) 206-0046 Fx cfabellamerencom
CIPC Vice Chair Physical Security
Robert D Canada Business Assurance Principal
Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308
(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom
OC Chair JS Holeman
Director System Operations
Duke Energy
(704) 382-0011 SamHolemanduke-energycom
Action Plan
Reliability Issues Coordinated Action Plan June 2011 16
Position
Name Title
Company City StateProvince
Phone E-mail
OC Vice Chair Tom Bowe
Executive Director of Compliance
PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403
610-666-4776 (610) 666-4287 Fx bowetpjmcom
PC Chair Tom Burgess
Director FERC Compliance
FirstEnergy Corp
330-384-5225 burgesstfirstenergycorpcom
PC Vice Chair Jeffrey L Mitchell
Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333
(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg
PCGC Chair Jacob Burger
Transmission System Control Coordinator
Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832
(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom
SC Chair Allen Mosher
Senior Director of Policy Analysis and Reliability
American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715
(202) 467-2944 (202) 467-2992 Fx amosherappanetorg
SC Vice Chair PS (Ben) Li
President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6
(647) 388-1498 (905) 887-2235 Fx benbenlica
REMG Representative
Edward A Schwerdt President and CEO
Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703
(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg
NERC Staff Roster
Reliability Issues Coordinated Action Plan
June 2011
17
NNEERRCC SSttaaffff RRoosstteerr
Position
Name Title
PhoneE-mail
NERC Staff Alvin J (AJ) Connor
Manager of Power System Analysis (609) 751-2579 ajconnornercnet
NERC Staff Tom Galloway
Senior Vice President and Chief Reliability Officer
(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet
NERC Staff Brian M Harrell
Manager of CIP Standards Training and Awareness
(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet
NERC Staff Larry J Kezele
Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet
NERC Staff Mark G Lauby
Vice President and Director of Reliability Assessment and Performance Analysis
(609) 452-8060 (609) 452-9550 Fax marklaubynercnet
NERC Staff Maureen E Long
Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet
NERC Staff Scott R Mix
CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet
NERC Staff Michael Moon
Director of Compliance Operations
(404) 446-2560 michaelmoonnercnet
NERC Staff Andrew Rodriquez Director of Standards Development
(404) 446-2560 andyrodriqueznercnet
NERC Staff Peter Knoetgen Director of Training and Accreditation
404-446-9688 peterknoetgennercnet
NERC Staff Herb Schrayshuen
Vice President and Director of Standards
((315) 439-1390 herbschrayshuennercnet
NERC Staff Mark Weatherford
Vice President and Chief Security Officer
(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet
Action Plan
Reliability Issues Coordinated Action Plan June 2011 9
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
Standards Committee NERC Reliability Standards
Prepare and achieve approval of Reliability Standard for Transmission Vegetation Management
Low 1 FAC-003-2 ndash Transmission Vegetation
Management 1 BOT eta Q3 2011
5
Ch
angi
ng
reso
urc
e m
ix
Planning Committee
Reliability Assessment Subcommittee
Integration of Variable Generation Task Force
Smart Grid Task Force
Ready industry for the changing resource mix and technology integration by providing guidance and input into NERCrsquos Reliability Standards
Unprecedented change in resource mix being realized through retirement of aging units capital fuel costs along with environmental regulations This change along with technological advances in communications and control can change the well understood character of the bulk power system requiring changes in the planning approaches to ensure operational reliability
Medium 1 IVGTF ndash addressing frequency voltage
response resource flexibility contingency reserves
2 SGTF ndash addressing reliability impacts 3 RIS-RAS - addressing scenarios resource
mix planning probabilistic assessments 4 Scenarios that address resource mix
implications such as natural gas interdependence
5 Evaluate benefit of probabilistic metrics and provide guidance to plannersoperators
6 Develop targetsmetricsrefinements for planningoperation
7 Provide guidance on tools for operators 8 Develop potential standards proposals
or guidanceadvisories that enhance reliability
9 Provide recommendations for expanded planning assessments to address resource mix changes
1 through 13 See Planning Committeersquos Strategic Plan
3
and Action Plan4
3 through 6 Resource Issues and Reliability Assessment Subcommittees
Annual Summer Reliability Assessment
Annual Winter Reliability Assessment
Annual Long-Term Reliability Assessment o Scenarios o Emerging Issues o Probabilistic
3 httpwwwnerccomdocspcAgendaItem_5a_PC_2011-2016_Strategic_Plan_v5_LINKpdf
4 httpwwwnerccomdocspcAgendaItem_5ai_PC_Strategic_Plan_Next20Steps2020Future20Work20Plan_v5_LINKpdf
Action Plan
Reliability Issues Coordinated Action Plan June 2011 10
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
6
Inte
grat
ion
of
new
te
chn
olo
gies
Planning Committee
Smart Grid Task Force
Reliability Assessment Subcommittee
10 Smart Grid impacts from distribution
systems (Address cyber aspects in 8 Non-Traditional Threats via Cyber-Security Vulnerabilities)
11 IVGTF dealing with distribution (renewables EV and conventional) resource integration
12 DRDTF addressing high levels of demand response integration
13 TIS and SPCS will provide guidance for modeling and controls systems managementcoordination
Assessment
7
Pre
par
edn
ess
for
hig
h
imp
act
low
fre
qu
ency
ev
ents
Planning Committee
Spare Equipment Database Task Force
Geomagnetic Disturbance Task Force
Operating Committee
Severe Impact Resilience Task Force
Critical Infrastructure Protection Committee
Cyber Attack Task Force
Address the risks from selected high impact low frequency events which can have unacceptable consequences on bulk power system reliability
The bulk power system has significant amounts of built-in resiliency However it has been planned and operated with the known risks to successfully manage system performance With changing threats from cyber physical and new facts about GMD industry will adjust their planning and operational activities to address these evolving risks
High 1 The Electricity Subsector Coordinating
Council has developed a BOT approved Critical Infrastructure Strategic Roadmap
5 in Q4 2010
2 The technical Committees have developed a Critical Infrastructure Strategic Initiatives Coordinated Action Plan
6 BOT approved in Q4 2010
1-2 Covered in the technical committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan
5 httpwwwnerccomdocsesccESCC_Critical_Infrastructure_Strategic_Roadmappdf
6 httpwwwnerccomdocsciscapCritical_Infrastructure_Strategic_Initiatives_Coordinated_Action_Plan_BOT_Apprd_11-2010pdf
Action Plan
Reliability Issues Coordinated Action Plan June 2011 11
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
8
No
n-t
rad
itio
nal
th
reat
s vi
a cy
ber
-se
curi
ty
vuln
erab
iliti
es
Critical Infrastructure Protection Committee
A resilient system fortified by industry planning and operational practices
The continuously evolving threat from cyber-security vulnerabilities requires new processes and procedures both for system planning and operations Industry awareness and cooperation with governmental jurisdictions are key aspects for this improved situational awareness
High
1 Also part of the deliverables in item 7 Preparedness for High Impact Low Frequency events
2 Metric development to measure cyber strength being developed with the Planning Committeersquos Smart Grid Task Force (SGTF)
3 Ongoing industry Alerts as required 4 Guidelines required to advise industry on
the establishment of appropriate cyber-security programs in their organizations
1 Covered in the technical
committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan
2 See Planning Committeersquos Strategic Plan and Action Plan along with the work plan for the SGTF
7
3 See NERCrsquos Alert website8
4 A subgroup formed to develop guidelines reviewing other industryrsquos to take advantage of existing knowledge 2012 Q4
7 httpwwwnerccomfilesSGTF_Report_Final_posted_v11pdf
8 httpwwwnerccompagephpcid=5|63
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
12
AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess
Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the
following list and abstract description was developed
1 Misoperations of relay protection and control systems ndash Nearly all major system failures
excluding perhaps those caused by severe weather have misoperations of relays or
automatic controls as a factor contributing to the propagation of the failure Protection
systems are designed to operate reliably when needed under the presence of a fault on the
system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without
allowing the fault to transfer into adjoining facilities The greater the number of facilities
involved in an event the more severe the impact to the rest of the bulk power system with
cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout
being the extreme Relays can misoperate either operate when not needed or fail to
operate when needed for a number of reasons First the device could experience an
internal failure ndash but this is rare Most commonly relays fail to operate correctly due to
incorrect settings improper coordination (of timing and set points) with other devices
ineffective maintenance and testing or failure of communications channels or power
supplies Preventable errors can be introduced by field personnel and their supervisors or
more programmatically by the organization Adding to the risk is that system protection is
an extremely complex engineering field ndashthere are many practitioners but few masters
2 Human errors by field personnel ndash Field personnel play an important role in the
maintenance and operation of the bulk power system They often are switching equipment
in and out of service and aligning alternative configurations Risks can be introduced when
field personnel operate equipment in a manner that reduces the redundancy of the bulk
power system sometimes even creating single points of failure that would not exist
normally Taking outages of equipment to conduct maintenance is a routine and necessary
part of reliable bulk power system operation However any alterations to the configuration
of the network must be carefully planned in advance to minimize loss of redundancy and
avoid unintended single points of failure It is also important that such changes and risks be
communicated to system operators and reliability coordinators in advance so that they can
make adjustments in their operating plans and reliability assessments
3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system
operators and reliability coordinators are comfortable with informal communications with
field and power plant personnel and neighboring systems Experience from analyzing
various events indicates there is often a sense of awkwardness when personnel transition
from conversational discussion to issuing reliability instructions It is also human nature to
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
13
be uncomfortable in applying formal communication procedures after personnel have
developed informal styles over many years Confusion in making the transition from normal
conversation to formal communications can introduce misunderstandings and possibly even
incorrect actions or assumptions Further once the need to transition to more formal
structure is recognized the transition is often not complete or effective Results can include
unclear instructions confusion whether an instruction is a suggestion or a directive whether
specific action is required or a set of alternative actions are permissible and confusion over
what elements of the system are being addressed
4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation
management programs as a key recommendation for avoiding future cascading failures
More broadly any encroachments in the right-of-way that reduce clearances to the point of
lowering facility ratings or reducing the randomness of possible contacts can be a risk to
reliability Although these impacts may not always be readily apparent under extreme wind
and temperature conditions they may become more of a risk to bulk power system
reliability There are many challenges to effective right-of-way maintenance especially
maintaining proper clearances including interventions by private landowners local
municipalities and federal and state landowners
5 Changing resource mix ndash Energy and environmental policies along with energy markets are
driving proposals toward unprecedented changes in the resource mix of the bulk power
system Examples include integration of significant amounts of renewable (variable such as
wind and solar) natural gas storage and demand resources to provide energy and capacity
Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a
century of operational experience with the existing resource mix However integration of
these new resources results in operating characteristics significantly different from
conventional steam production facilities An array of reliability services must be provided
over a range of time horizons from seconds to minutes to hours and days and annually such
as load following contingency reserves frequency response reactive supply capacity and
voltage control and power system stability Continued reliable operation of the bulk power
system will require an industry dialog with policymakers and regulators Understanding the
impacts on reliability will depend on accurate modeling of new resources and development
of new methods and tools for the provision of essential reliability services
6 Integration of new technologies ndash Introduction of electric vehicles demand-side
management variable generation distributed resources and smart grid technologies
presents tremendous opportunities but also introduces changes to the operating
characteristics of the bulk power system Integration of these new technologies requires
changes in the way the bulk power system is planned and operated to maintain reliability
Further additional toolsmodels are required to support their integration to meet policy and
strategic goals Without these changes it will be challenging to maintain reliability with
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
14
large-scale deployments For example some smart grid devicessystems increase exposure
to cyber threats while variable generation requires additional ancillary services Integration
of these new technologies must be achieved in a manner that does not undermine existing
levels of stability resilience and security of the bulk power system
7 Preparedness for high impact low frequency events ndash Although there is a wide range of
threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for
possible events that could debilitate the bulk power system for extended periods such as
widespread coordinated physicalcyber attacks or geomagnetic storms The industry must
consider improving the design of the bulk power system to address these potential risks and
prepare coordinated North American response plans for use during catastrophic events and
be ready to deploy those plans to restore essential services in a timely manner
8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-
based programs policies and processes to prepare for react to and recover from cyber
security vulnerabilities is a high priority for the industry The bulk power system has not yet
experienced wide-spread cyber-attacks and a contributing factor has been the traditional
physical separation between the industrial control systemSCADA environment and the
business and administrative networks This situation however is rapidly changing
predominantly due to the efficiencies that can be achieved by leveraging shared networks
and resources so now even physically separated environments are susceptible For example
the bulk power system could be as vulnerable to digital threats as IT systems but with far
more critical implications as the recent Stuxnet virus has shown Disabling or turning
systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial
control system software can be changed and data can be stolen without intrusions even
being detected These injection vectors serve as a blueprint for future attackers who wish to
access controllers safety systems and protection devices to insert malicious code targeting
changes to set points and switches as well as alteration or suppression of measurements
Standing Committee Coordination Group Roster
Reliability Issues Coordinated Action Plan
June 2011
15
SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr
Position
Name Title
Company City StateProvince
Phone E-mail
CCC Chair W Clay Smith
2100 East Exchange Place Tucker Georgia 30084-5336
(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom
CCC Vice Chair Terry L Bilke
Director Standards and Compliance
Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202
317 249-5463 317 249-5358 Fax tbilkemidwestisoorg
CCC Vice Chair Brett Hallborg
Manager of Operations Training
BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2
(604) 455-1778 bretthallborgbchydroc
om
CIPC Chair Barry Lawson
Manager Power Delivery
National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203
(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo
p
CIPC Vice Chair Cyber
Charles F Abell PE Supervising Engineer
Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103
(314) 554-3817 (314) 206-0046 Fx cfabellamerencom
CIPC Vice Chair Physical Security
Robert D Canada Business Assurance Principal
Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308
(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom
OC Chair JS Holeman
Director System Operations
Duke Energy
(704) 382-0011 SamHolemanduke-energycom
Action Plan
Reliability Issues Coordinated Action Plan June 2011 16
Position
Name Title
Company City StateProvince
Phone E-mail
OC Vice Chair Tom Bowe
Executive Director of Compliance
PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403
610-666-4776 (610) 666-4287 Fx bowetpjmcom
PC Chair Tom Burgess
Director FERC Compliance
FirstEnergy Corp
330-384-5225 burgesstfirstenergycorpcom
PC Vice Chair Jeffrey L Mitchell
Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333
(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg
PCGC Chair Jacob Burger
Transmission System Control Coordinator
Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832
(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom
SC Chair Allen Mosher
Senior Director of Policy Analysis and Reliability
American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715
(202) 467-2944 (202) 467-2992 Fx amosherappanetorg
SC Vice Chair PS (Ben) Li
President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6
(647) 388-1498 (905) 887-2235 Fx benbenlica
REMG Representative
Edward A Schwerdt President and CEO
Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703
(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg
NERC Staff Roster
Reliability Issues Coordinated Action Plan
June 2011
17
NNEERRCC SSttaaffff RRoosstteerr
Position
Name Title
PhoneE-mail
NERC Staff Alvin J (AJ) Connor
Manager of Power System Analysis (609) 751-2579 ajconnornercnet
NERC Staff Tom Galloway
Senior Vice President and Chief Reliability Officer
(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet
NERC Staff Brian M Harrell
Manager of CIP Standards Training and Awareness
(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet
NERC Staff Larry J Kezele
Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet
NERC Staff Mark G Lauby
Vice President and Director of Reliability Assessment and Performance Analysis
(609) 452-8060 (609) 452-9550 Fax marklaubynercnet
NERC Staff Maureen E Long
Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet
NERC Staff Scott R Mix
CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet
NERC Staff Michael Moon
Director of Compliance Operations
(404) 446-2560 michaelmoonnercnet
NERC Staff Andrew Rodriquez Director of Standards Development
(404) 446-2560 andyrodriqueznercnet
NERC Staff Peter Knoetgen Director of Training and Accreditation
404-446-9688 peterknoetgennercnet
NERC Staff Herb Schrayshuen
Vice President and Director of Standards
((315) 439-1390 herbschrayshuennercnet
NERC Staff Mark Weatherford
Vice President and Chief Security Officer
(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet
Action Plan
Reliability Issues Coordinated Action Plan June 2011 10
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
6
Inte
grat
ion
of
new
te
chn
olo
gies
Planning Committee
Smart Grid Task Force
Reliability Assessment Subcommittee
10 Smart Grid impacts from distribution
systems (Address cyber aspects in 8 Non-Traditional Threats via Cyber-Security Vulnerabilities)
11 IVGTF dealing with distribution (renewables EV and conventional) resource integration
12 DRDTF addressing high levels of demand response integration
13 TIS and SPCS will provide guidance for modeling and controls systems managementcoordination
Assessment
7
Pre
par
edn
ess
for
hig
h
imp
act
low
fre
qu
ency
ev
ents
Planning Committee
Spare Equipment Database Task Force
Geomagnetic Disturbance Task Force
Operating Committee
Severe Impact Resilience Task Force
Critical Infrastructure Protection Committee
Cyber Attack Task Force
Address the risks from selected high impact low frequency events which can have unacceptable consequences on bulk power system reliability
The bulk power system has significant amounts of built-in resiliency However it has been planned and operated with the known risks to successfully manage system performance With changing threats from cyber physical and new facts about GMD industry will adjust their planning and operational activities to address these evolving risks
High 1 The Electricity Subsector Coordinating
Council has developed a BOT approved Critical Infrastructure Strategic Roadmap
5 in Q4 2010
2 The technical Committees have developed a Critical Infrastructure Strategic Initiatives Coordinated Action Plan
6 BOT approved in Q4 2010
1-2 Covered in the technical committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan
5 httpwwwnerccomdocsesccESCC_Critical_Infrastructure_Strategic_Roadmappdf
6 httpwwwnerccomdocsciscapCritical_Infrastructure_Strategic_Initiatives_Coordinated_Action_Plan_BOT_Apprd_11-2010pdf
Action Plan
Reliability Issues Coordinated Action Plan June 2011 11
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
8
No
n-t
rad
itio
nal
th
reat
s vi
a cy
ber
-se
curi
ty
vuln
erab
iliti
es
Critical Infrastructure Protection Committee
A resilient system fortified by industry planning and operational practices
The continuously evolving threat from cyber-security vulnerabilities requires new processes and procedures both for system planning and operations Industry awareness and cooperation with governmental jurisdictions are key aspects for this improved situational awareness
High
1 Also part of the deliverables in item 7 Preparedness for High Impact Low Frequency events
2 Metric development to measure cyber strength being developed with the Planning Committeersquos Smart Grid Task Force (SGTF)
3 Ongoing industry Alerts as required 4 Guidelines required to advise industry on
the establishment of appropriate cyber-security programs in their organizations
1 Covered in the technical
committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan
2 See Planning Committeersquos Strategic Plan and Action Plan along with the work plan for the SGTF
7
3 See NERCrsquos Alert website8
4 A subgroup formed to develop guidelines reviewing other industryrsquos to take advantage of existing knowledge 2012 Q4
7 httpwwwnerccomfilesSGTF_Report_Final_posted_v11pdf
8 httpwwwnerccompagephpcid=5|63
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
12
AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess
Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the
following list and abstract description was developed
1 Misoperations of relay protection and control systems ndash Nearly all major system failures
excluding perhaps those caused by severe weather have misoperations of relays or
automatic controls as a factor contributing to the propagation of the failure Protection
systems are designed to operate reliably when needed under the presence of a fault on the
system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without
allowing the fault to transfer into adjoining facilities The greater the number of facilities
involved in an event the more severe the impact to the rest of the bulk power system with
cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout
being the extreme Relays can misoperate either operate when not needed or fail to
operate when needed for a number of reasons First the device could experience an
internal failure ndash but this is rare Most commonly relays fail to operate correctly due to
incorrect settings improper coordination (of timing and set points) with other devices
ineffective maintenance and testing or failure of communications channels or power
supplies Preventable errors can be introduced by field personnel and their supervisors or
more programmatically by the organization Adding to the risk is that system protection is
an extremely complex engineering field ndashthere are many practitioners but few masters
2 Human errors by field personnel ndash Field personnel play an important role in the
maintenance and operation of the bulk power system They often are switching equipment
in and out of service and aligning alternative configurations Risks can be introduced when
field personnel operate equipment in a manner that reduces the redundancy of the bulk
power system sometimes even creating single points of failure that would not exist
normally Taking outages of equipment to conduct maintenance is a routine and necessary
part of reliable bulk power system operation However any alterations to the configuration
of the network must be carefully planned in advance to minimize loss of redundancy and
avoid unintended single points of failure It is also important that such changes and risks be
communicated to system operators and reliability coordinators in advance so that they can
make adjustments in their operating plans and reliability assessments
3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system
operators and reliability coordinators are comfortable with informal communications with
field and power plant personnel and neighboring systems Experience from analyzing
various events indicates there is often a sense of awkwardness when personnel transition
from conversational discussion to issuing reliability instructions It is also human nature to
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
13
be uncomfortable in applying formal communication procedures after personnel have
developed informal styles over many years Confusion in making the transition from normal
conversation to formal communications can introduce misunderstandings and possibly even
incorrect actions or assumptions Further once the need to transition to more formal
structure is recognized the transition is often not complete or effective Results can include
unclear instructions confusion whether an instruction is a suggestion or a directive whether
specific action is required or a set of alternative actions are permissible and confusion over
what elements of the system are being addressed
4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation
management programs as a key recommendation for avoiding future cascading failures
More broadly any encroachments in the right-of-way that reduce clearances to the point of
lowering facility ratings or reducing the randomness of possible contacts can be a risk to
reliability Although these impacts may not always be readily apparent under extreme wind
and temperature conditions they may become more of a risk to bulk power system
reliability There are many challenges to effective right-of-way maintenance especially
maintaining proper clearances including interventions by private landowners local
municipalities and federal and state landowners
5 Changing resource mix ndash Energy and environmental policies along with energy markets are
driving proposals toward unprecedented changes in the resource mix of the bulk power
system Examples include integration of significant amounts of renewable (variable such as
wind and solar) natural gas storage and demand resources to provide energy and capacity
Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a
century of operational experience with the existing resource mix However integration of
these new resources results in operating characteristics significantly different from
conventional steam production facilities An array of reliability services must be provided
over a range of time horizons from seconds to minutes to hours and days and annually such
as load following contingency reserves frequency response reactive supply capacity and
voltage control and power system stability Continued reliable operation of the bulk power
system will require an industry dialog with policymakers and regulators Understanding the
impacts on reliability will depend on accurate modeling of new resources and development
of new methods and tools for the provision of essential reliability services
6 Integration of new technologies ndash Introduction of electric vehicles demand-side
management variable generation distributed resources and smart grid technologies
presents tremendous opportunities but also introduces changes to the operating
characteristics of the bulk power system Integration of these new technologies requires
changes in the way the bulk power system is planned and operated to maintain reliability
Further additional toolsmodels are required to support their integration to meet policy and
strategic goals Without these changes it will be challenging to maintain reliability with
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
14
large-scale deployments For example some smart grid devicessystems increase exposure
to cyber threats while variable generation requires additional ancillary services Integration
of these new technologies must be achieved in a manner that does not undermine existing
levels of stability resilience and security of the bulk power system
7 Preparedness for high impact low frequency events ndash Although there is a wide range of
threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for
possible events that could debilitate the bulk power system for extended periods such as
widespread coordinated physicalcyber attacks or geomagnetic storms The industry must
consider improving the design of the bulk power system to address these potential risks and
prepare coordinated North American response plans for use during catastrophic events and
be ready to deploy those plans to restore essential services in a timely manner
8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-
based programs policies and processes to prepare for react to and recover from cyber
security vulnerabilities is a high priority for the industry The bulk power system has not yet
experienced wide-spread cyber-attacks and a contributing factor has been the traditional
physical separation between the industrial control systemSCADA environment and the
business and administrative networks This situation however is rapidly changing
predominantly due to the efficiencies that can be achieved by leveraging shared networks
and resources so now even physically separated environments are susceptible For example
the bulk power system could be as vulnerable to digital threats as IT systems but with far
more critical implications as the recent Stuxnet virus has shown Disabling or turning
systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial
control system software can be changed and data can be stolen without intrusions even
being detected These injection vectors serve as a blueprint for future attackers who wish to
access controllers safety systems and protection devices to insert malicious code targeting
changes to set points and switches as well as alteration or suppression of measurements
Standing Committee Coordination Group Roster
Reliability Issues Coordinated Action Plan
June 2011
15
SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr
Position
Name Title
Company City StateProvince
Phone E-mail
CCC Chair W Clay Smith
2100 East Exchange Place Tucker Georgia 30084-5336
(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom
CCC Vice Chair Terry L Bilke
Director Standards and Compliance
Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202
317 249-5463 317 249-5358 Fax tbilkemidwestisoorg
CCC Vice Chair Brett Hallborg
Manager of Operations Training
BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2
(604) 455-1778 bretthallborgbchydroc
om
CIPC Chair Barry Lawson
Manager Power Delivery
National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203
(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo
p
CIPC Vice Chair Cyber
Charles F Abell PE Supervising Engineer
Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103
(314) 554-3817 (314) 206-0046 Fx cfabellamerencom
CIPC Vice Chair Physical Security
Robert D Canada Business Assurance Principal
Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308
(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom
OC Chair JS Holeman
Director System Operations
Duke Energy
(704) 382-0011 SamHolemanduke-energycom
Action Plan
Reliability Issues Coordinated Action Plan June 2011 16
Position
Name Title
Company City StateProvince
Phone E-mail
OC Vice Chair Tom Bowe
Executive Director of Compliance
PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403
610-666-4776 (610) 666-4287 Fx bowetpjmcom
PC Chair Tom Burgess
Director FERC Compliance
FirstEnergy Corp
330-384-5225 burgesstfirstenergycorpcom
PC Vice Chair Jeffrey L Mitchell
Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333
(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg
PCGC Chair Jacob Burger
Transmission System Control Coordinator
Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832
(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom
SC Chair Allen Mosher
Senior Director of Policy Analysis and Reliability
American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715
(202) 467-2944 (202) 467-2992 Fx amosherappanetorg
SC Vice Chair PS (Ben) Li
President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6
(647) 388-1498 (905) 887-2235 Fx benbenlica
REMG Representative
Edward A Schwerdt President and CEO
Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703
(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg
NERC Staff Roster
Reliability Issues Coordinated Action Plan
June 2011
17
NNEERRCC SSttaaffff RRoosstteerr
Position
Name Title
PhoneE-mail
NERC Staff Alvin J (AJ) Connor
Manager of Power System Analysis (609) 751-2579 ajconnornercnet
NERC Staff Tom Galloway
Senior Vice President and Chief Reliability Officer
(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet
NERC Staff Brian M Harrell
Manager of CIP Standards Training and Awareness
(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet
NERC Staff Larry J Kezele
Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet
NERC Staff Mark G Lauby
Vice President and Director of Reliability Assessment and Performance Analysis
(609) 452-8060 (609) 452-9550 Fax marklaubynercnet
NERC Staff Maureen E Long
Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet
NERC Staff Scott R Mix
CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet
NERC Staff Michael Moon
Director of Compliance Operations
(404) 446-2560 michaelmoonnercnet
NERC Staff Andrew Rodriquez Director of Standards Development
(404) 446-2560 andyrodriqueznercnet
NERC Staff Peter Knoetgen Director of Training and Accreditation
404-446-9688 peterknoetgennercnet
NERC Staff Herb Schrayshuen
Vice President and Director of Standards
((315) 439-1390 herbschrayshuennercnet
NERC Staff Mark Weatherford
Vice President and Chief Security Officer
(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet
Action Plan
Reliability Issues Coordinated Action Plan June 2011 11
Priority Issue
Lead Committee Subgroup
Proposed Enhancement
Abstract Priority Deliverables Milestones
8
No
n-t
rad
itio
nal
th
reat
s vi
a cy
ber
-se
curi
ty
vuln
erab
iliti
es
Critical Infrastructure Protection Committee
A resilient system fortified by industry planning and operational practices
The continuously evolving threat from cyber-security vulnerabilities requires new processes and procedures both for system planning and operations Industry awareness and cooperation with governmental jurisdictions are key aspects for this improved situational awareness
High
1 Also part of the deliverables in item 7 Preparedness for High Impact Low Frequency events
2 Metric development to measure cyber strength being developed with the Planning Committeersquos Smart Grid Task Force (SGTF)
3 Ongoing industry Alerts as required 4 Guidelines required to advise industry on
the establishment of appropriate cyber-security programs in their organizations
1 Covered in the technical
committeersquos Critical Infrastructure Strategic Initiatives Coordinated Action Plan
2 See Planning Committeersquos Strategic Plan and Action Plan along with the work plan for the SGTF
7
3 See NERCrsquos Alert website8
4 A subgroup formed to develop guidelines reviewing other industryrsquos to take advantage of existing knowledge 2012 Q4
7 httpwwwnerccomfilesSGTF_Report_Final_posted_v11pdf
8 httpwwwnerccompagephpcid=5|63
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
12
AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess
Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the
following list and abstract description was developed
1 Misoperations of relay protection and control systems ndash Nearly all major system failures
excluding perhaps those caused by severe weather have misoperations of relays or
automatic controls as a factor contributing to the propagation of the failure Protection
systems are designed to operate reliably when needed under the presence of a fault on the
system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without
allowing the fault to transfer into adjoining facilities The greater the number of facilities
involved in an event the more severe the impact to the rest of the bulk power system with
cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout
being the extreme Relays can misoperate either operate when not needed or fail to
operate when needed for a number of reasons First the device could experience an
internal failure ndash but this is rare Most commonly relays fail to operate correctly due to
incorrect settings improper coordination (of timing and set points) with other devices
ineffective maintenance and testing or failure of communications channels or power
supplies Preventable errors can be introduced by field personnel and their supervisors or
more programmatically by the organization Adding to the risk is that system protection is
an extremely complex engineering field ndashthere are many practitioners but few masters
2 Human errors by field personnel ndash Field personnel play an important role in the
maintenance and operation of the bulk power system They often are switching equipment
in and out of service and aligning alternative configurations Risks can be introduced when
field personnel operate equipment in a manner that reduces the redundancy of the bulk
power system sometimes even creating single points of failure that would not exist
normally Taking outages of equipment to conduct maintenance is a routine and necessary
part of reliable bulk power system operation However any alterations to the configuration
of the network must be carefully planned in advance to minimize loss of redundancy and
avoid unintended single points of failure It is also important that such changes and risks be
communicated to system operators and reliability coordinators in advance so that they can
make adjustments in their operating plans and reliability assessments
3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system
operators and reliability coordinators are comfortable with informal communications with
field and power plant personnel and neighboring systems Experience from analyzing
various events indicates there is often a sense of awkwardness when personnel transition
from conversational discussion to issuing reliability instructions It is also human nature to
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
13
be uncomfortable in applying formal communication procedures after personnel have
developed informal styles over many years Confusion in making the transition from normal
conversation to formal communications can introduce misunderstandings and possibly even
incorrect actions or assumptions Further once the need to transition to more formal
structure is recognized the transition is often not complete or effective Results can include
unclear instructions confusion whether an instruction is a suggestion or a directive whether
specific action is required or a set of alternative actions are permissible and confusion over
what elements of the system are being addressed
4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation
management programs as a key recommendation for avoiding future cascading failures
More broadly any encroachments in the right-of-way that reduce clearances to the point of
lowering facility ratings or reducing the randomness of possible contacts can be a risk to
reliability Although these impacts may not always be readily apparent under extreme wind
and temperature conditions they may become more of a risk to bulk power system
reliability There are many challenges to effective right-of-way maintenance especially
maintaining proper clearances including interventions by private landowners local
municipalities and federal and state landowners
5 Changing resource mix ndash Energy and environmental policies along with energy markets are
driving proposals toward unprecedented changes in the resource mix of the bulk power
system Examples include integration of significant amounts of renewable (variable such as
wind and solar) natural gas storage and demand resources to provide energy and capacity
Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a
century of operational experience with the existing resource mix However integration of
these new resources results in operating characteristics significantly different from
conventional steam production facilities An array of reliability services must be provided
over a range of time horizons from seconds to minutes to hours and days and annually such
as load following contingency reserves frequency response reactive supply capacity and
voltage control and power system stability Continued reliable operation of the bulk power
system will require an industry dialog with policymakers and regulators Understanding the
impacts on reliability will depend on accurate modeling of new resources and development
of new methods and tools for the provision of essential reliability services
6 Integration of new technologies ndash Introduction of electric vehicles demand-side
management variable generation distributed resources and smart grid technologies
presents tremendous opportunities but also introduces changes to the operating
characteristics of the bulk power system Integration of these new technologies requires
changes in the way the bulk power system is planned and operated to maintain reliability
Further additional toolsmodels are required to support their integration to meet policy and
strategic goals Without these changes it will be challenging to maintain reliability with
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
14
large-scale deployments For example some smart grid devicessystems increase exposure
to cyber threats while variable generation requires additional ancillary services Integration
of these new technologies must be achieved in a manner that does not undermine existing
levels of stability resilience and security of the bulk power system
7 Preparedness for high impact low frequency events ndash Although there is a wide range of
threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for
possible events that could debilitate the bulk power system for extended periods such as
widespread coordinated physicalcyber attacks or geomagnetic storms The industry must
consider improving the design of the bulk power system to address these potential risks and
prepare coordinated North American response plans for use during catastrophic events and
be ready to deploy those plans to restore essential services in a timely manner
8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-
based programs policies and processes to prepare for react to and recover from cyber
security vulnerabilities is a high priority for the industry The bulk power system has not yet
experienced wide-spread cyber-attacks and a contributing factor has been the traditional
physical separation between the industrial control systemSCADA environment and the
business and administrative networks This situation however is rapidly changing
predominantly due to the efficiencies that can be achieved by leveraging shared networks
and resources so now even physically separated environments are susceptible For example
the bulk power system could be as vulnerable to digital threats as IT systems but with far
more critical implications as the recent Stuxnet virus has shown Disabling or turning
systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial
control system software can be changed and data can be stolen without intrusions even
being detected These injection vectors serve as a blueprint for future attackers who wish to
access controllers safety systems and protection devices to insert malicious code targeting
changes to set points and switches as well as alteration or suppression of measurements
Standing Committee Coordination Group Roster
Reliability Issues Coordinated Action Plan
June 2011
15
SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr
Position
Name Title
Company City StateProvince
Phone E-mail
CCC Chair W Clay Smith
2100 East Exchange Place Tucker Georgia 30084-5336
(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom
CCC Vice Chair Terry L Bilke
Director Standards and Compliance
Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202
317 249-5463 317 249-5358 Fax tbilkemidwestisoorg
CCC Vice Chair Brett Hallborg
Manager of Operations Training
BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2
(604) 455-1778 bretthallborgbchydroc
om
CIPC Chair Barry Lawson
Manager Power Delivery
National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203
(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo
p
CIPC Vice Chair Cyber
Charles F Abell PE Supervising Engineer
Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103
(314) 554-3817 (314) 206-0046 Fx cfabellamerencom
CIPC Vice Chair Physical Security
Robert D Canada Business Assurance Principal
Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308
(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom
OC Chair JS Holeman
Director System Operations
Duke Energy
(704) 382-0011 SamHolemanduke-energycom
Action Plan
Reliability Issues Coordinated Action Plan June 2011 16
Position
Name Title
Company City StateProvince
Phone E-mail
OC Vice Chair Tom Bowe
Executive Director of Compliance
PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403
610-666-4776 (610) 666-4287 Fx bowetpjmcom
PC Chair Tom Burgess
Director FERC Compliance
FirstEnergy Corp
330-384-5225 burgesstfirstenergycorpcom
PC Vice Chair Jeffrey L Mitchell
Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333
(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg
PCGC Chair Jacob Burger
Transmission System Control Coordinator
Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832
(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom
SC Chair Allen Mosher
Senior Director of Policy Analysis and Reliability
American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715
(202) 467-2944 (202) 467-2992 Fx amosherappanetorg
SC Vice Chair PS (Ben) Li
President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6
(647) 388-1498 (905) 887-2235 Fx benbenlica
REMG Representative
Edward A Schwerdt President and CEO
Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703
(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg
NERC Staff Roster
Reliability Issues Coordinated Action Plan
June 2011
17
NNEERRCC SSttaaffff RRoosstteerr
Position
Name Title
PhoneE-mail
NERC Staff Alvin J (AJ) Connor
Manager of Power System Analysis (609) 751-2579 ajconnornercnet
NERC Staff Tom Galloway
Senior Vice President and Chief Reliability Officer
(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet
NERC Staff Brian M Harrell
Manager of CIP Standards Training and Awareness
(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet
NERC Staff Larry J Kezele
Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet
NERC Staff Mark G Lauby
Vice President and Director of Reliability Assessment and Performance Analysis
(609) 452-8060 (609) 452-9550 Fax marklaubynercnet
NERC Staff Maureen E Long
Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet
NERC Staff Scott R Mix
CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet
NERC Staff Michael Moon
Director of Compliance Operations
(404) 446-2560 michaelmoonnercnet
NERC Staff Andrew Rodriquez Director of Standards Development
(404) 446-2560 andyrodriqueznercnet
NERC Staff Peter Knoetgen Director of Training and Accreditation
404-446-9688 peterknoetgennercnet
NERC Staff Herb Schrayshuen
Vice President and Director of Standards
((315) 439-1390 herbschrayshuennercnet
NERC Staff Mark Weatherford
Vice President and Chief Security Officer
(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
12
AAppppeennddiixx 11 TToopp PPrriioorriittyy RReelliiaabbiilliittyy IIssssuueess
Based on NERCrsquos Presidentrsquos initial list and enhancements from the standing committees the
following list and abstract description was developed
1 Misoperations of relay protection and control systems ndash Nearly all major system failures
excluding perhaps those caused by severe weather have misoperations of relays or
automatic controls as a factor contributing to the propagation of the failure Protection
systems are designed to operate reliably when needed under the presence of a fault on the
system to quickly isolate a piece of equipment or a lsquozonersquo of the bulk power system without
allowing the fault to transfer into adjoining facilities The greater the number of facilities
involved in an event the more severe the impact to the rest of the bulk power system with
cascading failure such as resulted from the ldquoZone 3 Relayrdquo issue in the August 2003 blackout
being the extreme Relays can misoperate either operate when not needed or fail to
operate when needed for a number of reasons First the device could experience an
internal failure ndash but this is rare Most commonly relays fail to operate correctly due to
incorrect settings improper coordination (of timing and set points) with other devices
ineffective maintenance and testing or failure of communications channels or power
supplies Preventable errors can be introduced by field personnel and their supervisors or
more programmatically by the organization Adding to the risk is that system protection is
an extremely complex engineering field ndashthere are many practitioners but few masters
2 Human errors by field personnel ndash Field personnel play an important role in the
maintenance and operation of the bulk power system They often are switching equipment
in and out of service and aligning alternative configurations Risks can be introduced when
field personnel operate equipment in a manner that reduces the redundancy of the bulk
power system sometimes even creating single points of failure that would not exist
normally Taking outages of equipment to conduct maintenance is a routine and necessary
part of reliable bulk power system operation However any alterations to the configuration
of the network must be carefully planned in advance to minimize loss of redundancy and
avoid unintended single points of failure It is also important that such changes and risks be
communicated to system operators and reliability coordinators in advance so that they can
make adjustments in their operating plans and reliability assessments
3 Ambiguous or incomplete voice communications ndash Out of longstanding tradition system
operators and reliability coordinators are comfortable with informal communications with
field and power plant personnel and neighboring systems Experience from analyzing
various events indicates there is often a sense of awkwardness when personnel transition
from conversational discussion to issuing reliability instructions It is also human nature to
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
13
be uncomfortable in applying formal communication procedures after personnel have
developed informal styles over many years Confusion in making the transition from normal
conversation to formal communications can introduce misunderstandings and possibly even
incorrect actions or assumptions Further once the need to transition to more formal
structure is recognized the transition is often not complete or effective Results can include
unclear instructions confusion whether an instruction is a suggestion or a directive whether
specific action is required or a set of alternative actions are permissible and confusion over
what elements of the system are being addressed
4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation
management programs as a key recommendation for avoiding future cascading failures
More broadly any encroachments in the right-of-way that reduce clearances to the point of
lowering facility ratings or reducing the randomness of possible contacts can be a risk to
reliability Although these impacts may not always be readily apparent under extreme wind
and temperature conditions they may become more of a risk to bulk power system
reliability There are many challenges to effective right-of-way maintenance especially
maintaining proper clearances including interventions by private landowners local
municipalities and federal and state landowners
5 Changing resource mix ndash Energy and environmental policies along with energy markets are
driving proposals toward unprecedented changes in the resource mix of the bulk power
system Examples include integration of significant amounts of renewable (variable such as
wind and solar) natural gas storage and demand resources to provide energy and capacity
Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a
century of operational experience with the existing resource mix However integration of
these new resources results in operating characteristics significantly different from
conventional steam production facilities An array of reliability services must be provided
over a range of time horizons from seconds to minutes to hours and days and annually such
as load following contingency reserves frequency response reactive supply capacity and
voltage control and power system stability Continued reliable operation of the bulk power
system will require an industry dialog with policymakers and regulators Understanding the
impacts on reliability will depend on accurate modeling of new resources and development
of new methods and tools for the provision of essential reliability services
6 Integration of new technologies ndash Introduction of electric vehicles demand-side
management variable generation distributed resources and smart grid technologies
presents tremendous opportunities but also introduces changes to the operating
characteristics of the bulk power system Integration of these new technologies requires
changes in the way the bulk power system is planned and operated to maintain reliability
Further additional toolsmodels are required to support their integration to meet policy and
strategic goals Without these changes it will be challenging to maintain reliability with
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
14
large-scale deployments For example some smart grid devicessystems increase exposure
to cyber threats while variable generation requires additional ancillary services Integration
of these new technologies must be achieved in a manner that does not undermine existing
levels of stability resilience and security of the bulk power system
7 Preparedness for high impact low frequency events ndash Although there is a wide range of
threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for
possible events that could debilitate the bulk power system for extended periods such as
widespread coordinated physicalcyber attacks or geomagnetic storms The industry must
consider improving the design of the bulk power system to address these potential risks and
prepare coordinated North American response plans for use during catastrophic events and
be ready to deploy those plans to restore essential services in a timely manner
8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-
based programs policies and processes to prepare for react to and recover from cyber
security vulnerabilities is a high priority for the industry The bulk power system has not yet
experienced wide-spread cyber-attacks and a contributing factor has been the traditional
physical separation between the industrial control systemSCADA environment and the
business and administrative networks This situation however is rapidly changing
predominantly due to the efficiencies that can be achieved by leveraging shared networks
and resources so now even physically separated environments are susceptible For example
the bulk power system could be as vulnerable to digital threats as IT systems but with far
more critical implications as the recent Stuxnet virus has shown Disabling or turning
systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial
control system software can be changed and data can be stolen without intrusions even
being detected These injection vectors serve as a blueprint for future attackers who wish to
access controllers safety systems and protection devices to insert malicious code targeting
changes to set points and switches as well as alteration or suppression of measurements
Standing Committee Coordination Group Roster
Reliability Issues Coordinated Action Plan
June 2011
15
SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr
Position
Name Title
Company City StateProvince
Phone E-mail
CCC Chair W Clay Smith
2100 East Exchange Place Tucker Georgia 30084-5336
(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom
CCC Vice Chair Terry L Bilke
Director Standards and Compliance
Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202
317 249-5463 317 249-5358 Fax tbilkemidwestisoorg
CCC Vice Chair Brett Hallborg
Manager of Operations Training
BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2
(604) 455-1778 bretthallborgbchydroc
om
CIPC Chair Barry Lawson
Manager Power Delivery
National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203
(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo
p
CIPC Vice Chair Cyber
Charles F Abell PE Supervising Engineer
Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103
(314) 554-3817 (314) 206-0046 Fx cfabellamerencom
CIPC Vice Chair Physical Security
Robert D Canada Business Assurance Principal
Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308
(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom
OC Chair JS Holeman
Director System Operations
Duke Energy
(704) 382-0011 SamHolemanduke-energycom
Action Plan
Reliability Issues Coordinated Action Plan June 2011 16
Position
Name Title
Company City StateProvince
Phone E-mail
OC Vice Chair Tom Bowe
Executive Director of Compliance
PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403
610-666-4776 (610) 666-4287 Fx bowetpjmcom
PC Chair Tom Burgess
Director FERC Compliance
FirstEnergy Corp
330-384-5225 burgesstfirstenergycorpcom
PC Vice Chair Jeffrey L Mitchell
Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333
(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg
PCGC Chair Jacob Burger
Transmission System Control Coordinator
Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832
(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom
SC Chair Allen Mosher
Senior Director of Policy Analysis and Reliability
American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715
(202) 467-2944 (202) 467-2992 Fx amosherappanetorg
SC Vice Chair PS (Ben) Li
President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6
(647) 388-1498 (905) 887-2235 Fx benbenlica
REMG Representative
Edward A Schwerdt President and CEO
Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703
(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg
NERC Staff Roster
Reliability Issues Coordinated Action Plan
June 2011
17
NNEERRCC SSttaaffff RRoosstteerr
Position
Name Title
PhoneE-mail
NERC Staff Alvin J (AJ) Connor
Manager of Power System Analysis (609) 751-2579 ajconnornercnet
NERC Staff Tom Galloway
Senior Vice President and Chief Reliability Officer
(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet
NERC Staff Brian M Harrell
Manager of CIP Standards Training and Awareness
(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet
NERC Staff Larry J Kezele
Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet
NERC Staff Mark G Lauby
Vice President and Director of Reliability Assessment and Performance Analysis
(609) 452-8060 (609) 452-9550 Fax marklaubynercnet
NERC Staff Maureen E Long
Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet
NERC Staff Scott R Mix
CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet
NERC Staff Michael Moon
Director of Compliance Operations
(404) 446-2560 michaelmoonnercnet
NERC Staff Andrew Rodriquez Director of Standards Development
(404) 446-2560 andyrodriqueznercnet
NERC Staff Peter Knoetgen Director of Training and Accreditation
404-446-9688 peterknoetgennercnet
NERC Staff Herb Schrayshuen
Vice President and Director of Standards
((315) 439-1390 herbschrayshuennercnet
NERC Staff Mark Weatherford
Vice President and Chief Security Officer
(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
13
be uncomfortable in applying formal communication procedures after personnel have
developed informal styles over many years Confusion in making the transition from normal
conversation to formal communications can introduce misunderstandings and possibly even
incorrect actions or assumptions Further once the need to transition to more formal
structure is recognized the transition is often not complete or effective Results can include
unclear instructions confusion whether an instruction is a suggestion or a directive whether
specific action is required or a set of alternative actions are permissible and confusion over
what elements of the system are being addressed
4 Right-of-way maintenance ndash The August 14 2003 blackout highlighted effective vegetation
management programs as a key recommendation for avoiding future cascading failures
More broadly any encroachments in the right-of-way that reduce clearances to the point of
lowering facility ratings or reducing the randomness of possible contacts can be a risk to
reliability Although these impacts may not always be readily apparent under extreme wind
and temperature conditions they may become more of a risk to bulk power system
reliability There are many challenges to effective right-of-way maintenance especially
maintaining proper clearances including interventions by private landowners local
municipalities and federal and state landowners
5 Changing resource mix ndash Energy and environmental policies along with energy markets are
driving proposals toward unprecedented changes in the resource mix of the bulk power
system Examples include integration of significant amounts of renewable (variable such as
wind and solar) natural gas storage and demand resources to provide energy and capacity
Industryrsquos knowledge of the characteristics of the bulk power system comes from nearly a
century of operational experience with the existing resource mix However integration of
these new resources results in operating characteristics significantly different from
conventional steam production facilities An array of reliability services must be provided
over a range of time horizons from seconds to minutes to hours and days and annually such
as load following contingency reserves frequency response reactive supply capacity and
voltage control and power system stability Continued reliable operation of the bulk power
system will require an industry dialog with policymakers and regulators Understanding the
impacts on reliability will depend on accurate modeling of new resources and development
of new methods and tools for the provision of essential reliability services
6 Integration of new technologies ndash Introduction of electric vehicles demand-side
management variable generation distributed resources and smart grid technologies
presents tremendous opportunities but also introduces changes to the operating
characteristics of the bulk power system Integration of these new technologies requires
changes in the way the bulk power system is planned and operated to maintain reliability
Further additional toolsmodels are required to support their integration to meet policy and
strategic goals Without these changes it will be challenging to maintain reliability with
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
14
large-scale deployments For example some smart grid devicessystems increase exposure
to cyber threats while variable generation requires additional ancillary services Integration
of these new technologies must be achieved in a manner that does not undermine existing
levels of stability resilience and security of the bulk power system
7 Preparedness for high impact low frequency events ndash Although there is a wide range of
threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for
possible events that could debilitate the bulk power system for extended periods such as
widespread coordinated physicalcyber attacks or geomagnetic storms The industry must
consider improving the design of the bulk power system to address these potential risks and
prepare coordinated North American response plans for use during catastrophic events and
be ready to deploy those plans to restore essential services in a timely manner
8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-
based programs policies and processes to prepare for react to and recover from cyber
security vulnerabilities is a high priority for the industry The bulk power system has not yet
experienced wide-spread cyber-attacks and a contributing factor has been the traditional
physical separation between the industrial control systemSCADA environment and the
business and administrative networks This situation however is rapidly changing
predominantly due to the efficiencies that can be achieved by leveraging shared networks
and resources so now even physically separated environments are susceptible For example
the bulk power system could be as vulnerable to digital threats as IT systems but with far
more critical implications as the recent Stuxnet virus has shown Disabling or turning
systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial
control system software can be changed and data can be stolen without intrusions even
being detected These injection vectors serve as a blueprint for future attackers who wish to
access controllers safety systems and protection devices to insert malicious code targeting
changes to set points and switches as well as alteration or suppression of measurements
Standing Committee Coordination Group Roster
Reliability Issues Coordinated Action Plan
June 2011
15
SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr
Position
Name Title
Company City StateProvince
Phone E-mail
CCC Chair W Clay Smith
2100 East Exchange Place Tucker Georgia 30084-5336
(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom
CCC Vice Chair Terry L Bilke
Director Standards and Compliance
Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202
317 249-5463 317 249-5358 Fax tbilkemidwestisoorg
CCC Vice Chair Brett Hallborg
Manager of Operations Training
BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2
(604) 455-1778 bretthallborgbchydroc
om
CIPC Chair Barry Lawson
Manager Power Delivery
National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203
(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo
p
CIPC Vice Chair Cyber
Charles F Abell PE Supervising Engineer
Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103
(314) 554-3817 (314) 206-0046 Fx cfabellamerencom
CIPC Vice Chair Physical Security
Robert D Canada Business Assurance Principal
Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308
(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom
OC Chair JS Holeman
Director System Operations
Duke Energy
(704) 382-0011 SamHolemanduke-energycom
Action Plan
Reliability Issues Coordinated Action Plan June 2011 16
Position
Name Title
Company City StateProvince
Phone E-mail
OC Vice Chair Tom Bowe
Executive Director of Compliance
PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403
610-666-4776 (610) 666-4287 Fx bowetpjmcom
PC Chair Tom Burgess
Director FERC Compliance
FirstEnergy Corp
330-384-5225 burgesstfirstenergycorpcom
PC Vice Chair Jeffrey L Mitchell
Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333
(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg
PCGC Chair Jacob Burger
Transmission System Control Coordinator
Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832
(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom
SC Chair Allen Mosher
Senior Director of Policy Analysis and Reliability
American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715
(202) 467-2944 (202) 467-2992 Fx amosherappanetorg
SC Vice Chair PS (Ben) Li
President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6
(647) 388-1498 (905) 887-2235 Fx benbenlica
REMG Representative
Edward A Schwerdt President and CEO
Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703
(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg
NERC Staff Roster
Reliability Issues Coordinated Action Plan
June 2011
17
NNEERRCC SSttaaffff RRoosstteerr
Position
Name Title
PhoneE-mail
NERC Staff Alvin J (AJ) Connor
Manager of Power System Analysis (609) 751-2579 ajconnornercnet
NERC Staff Tom Galloway
Senior Vice President and Chief Reliability Officer
(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet
NERC Staff Brian M Harrell
Manager of CIP Standards Training and Awareness
(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet
NERC Staff Larry J Kezele
Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet
NERC Staff Mark G Lauby
Vice President and Director of Reliability Assessment and Performance Analysis
(609) 452-8060 (609) 452-9550 Fax marklaubynercnet
NERC Staff Maureen E Long
Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet
NERC Staff Scott R Mix
CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet
NERC Staff Michael Moon
Director of Compliance Operations
(404) 446-2560 michaelmoonnercnet
NERC Staff Andrew Rodriquez Director of Standards Development
(404) 446-2560 andyrodriqueznercnet
NERC Staff Peter Knoetgen Director of Training and Accreditation
404-446-9688 peterknoetgennercnet
NERC Staff Herb Schrayshuen
Vice President and Director of Standards
((315) 439-1390 herbschrayshuennercnet
NERC Staff Mark Weatherford
Vice President and Chief Security Officer
(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet
Appendix 1 Top Priority Reliability Issues
Reliability Issues Coordinated Action Plan
June 2011
14
large-scale deployments For example some smart grid devicessystems increase exposure
to cyber threats while variable generation requires additional ancillary services Integration
of these new technologies must be achieved in a manner that does not undermine existing
levels of stability resilience and security of the bulk power system
7 Preparedness for high impact low frequency events ndash Although there is a wide range of
threats labeled lsquohigh impact low frequencyrsquo the greatest concern is being prepared for
possible events that could debilitate the bulk power system for extended periods such as
widespread coordinated physicalcyber attacks or geomagnetic storms The industry must
consider improving the design of the bulk power system to address these potential risks and
prepare coordinated North American response plans for use during catastrophic events and
be ready to deploy those plans to restore essential services in a timely manner
8 Non-traditional threats via cyber security vulnerabilities ndash Establishment of enterprise risk-
based programs policies and processes to prepare for react to and recover from cyber
security vulnerabilities is a high priority for the industry The bulk power system has not yet
experienced wide-spread cyber-attacks and a contributing factor has been the traditional
physical separation between the industrial control systemSCADA environment and the
business and administrative networks This situation however is rapidly changing
predominantly due to the efficiencies that can be achieved by leveraging shared networks
and resources so now even physically separated environments are susceptible For example
the bulk power system could be as vulnerable to digital threats as IT systems but with far
more critical implications as the recent Stuxnet virus has shown Disabling or turning
systems off in a binary fashion is concerning enough but as illustrated by Stuxnet industrial
control system software can be changed and data can be stolen without intrusions even
being detected These injection vectors serve as a blueprint for future attackers who wish to
access controllers safety systems and protection devices to insert malicious code targeting
changes to set points and switches as well as alteration or suppression of measurements
Standing Committee Coordination Group Roster
Reliability Issues Coordinated Action Plan
June 2011
15
SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr
Position
Name Title
Company City StateProvince
Phone E-mail
CCC Chair W Clay Smith
2100 East Exchange Place Tucker Georgia 30084-5336
(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom
CCC Vice Chair Terry L Bilke
Director Standards and Compliance
Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202
317 249-5463 317 249-5358 Fax tbilkemidwestisoorg
CCC Vice Chair Brett Hallborg
Manager of Operations Training
BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2
(604) 455-1778 bretthallborgbchydroc
om
CIPC Chair Barry Lawson
Manager Power Delivery
National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203
(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo
p
CIPC Vice Chair Cyber
Charles F Abell PE Supervising Engineer
Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103
(314) 554-3817 (314) 206-0046 Fx cfabellamerencom
CIPC Vice Chair Physical Security
Robert D Canada Business Assurance Principal
Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308
(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom
OC Chair JS Holeman
Director System Operations
Duke Energy
(704) 382-0011 SamHolemanduke-energycom
Action Plan
Reliability Issues Coordinated Action Plan June 2011 16
Position
Name Title
Company City StateProvince
Phone E-mail
OC Vice Chair Tom Bowe
Executive Director of Compliance
PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403
610-666-4776 (610) 666-4287 Fx bowetpjmcom
PC Chair Tom Burgess
Director FERC Compliance
FirstEnergy Corp
330-384-5225 burgesstfirstenergycorpcom
PC Vice Chair Jeffrey L Mitchell
Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333
(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg
PCGC Chair Jacob Burger
Transmission System Control Coordinator
Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832
(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom
SC Chair Allen Mosher
Senior Director of Policy Analysis and Reliability
American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715
(202) 467-2944 (202) 467-2992 Fx amosherappanetorg
SC Vice Chair PS (Ben) Li
President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6
(647) 388-1498 (905) 887-2235 Fx benbenlica
REMG Representative
Edward A Schwerdt President and CEO
Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703
(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg
NERC Staff Roster
Reliability Issues Coordinated Action Plan
June 2011
17
NNEERRCC SSttaaffff RRoosstteerr
Position
Name Title
PhoneE-mail
NERC Staff Alvin J (AJ) Connor
Manager of Power System Analysis (609) 751-2579 ajconnornercnet
NERC Staff Tom Galloway
Senior Vice President and Chief Reliability Officer
(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet
NERC Staff Brian M Harrell
Manager of CIP Standards Training and Awareness
(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet
NERC Staff Larry J Kezele
Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet
NERC Staff Mark G Lauby
Vice President and Director of Reliability Assessment and Performance Analysis
(609) 452-8060 (609) 452-9550 Fax marklaubynercnet
NERC Staff Maureen E Long
Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet
NERC Staff Scott R Mix
CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet
NERC Staff Michael Moon
Director of Compliance Operations
(404) 446-2560 michaelmoonnercnet
NERC Staff Andrew Rodriquez Director of Standards Development
(404) 446-2560 andyrodriqueznercnet
NERC Staff Peter Knoetgen Director of Training and Accreditation
404-446-9688 peterknoetgennercnet
NERC Staff Herb Schrayshuen
Vice President and Director of Standards
((315) 439-1390 herbschrayshuennercnet
NERC Staff Mark Weatherford
Vice President and Chief Security Officer
(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet
Standing Committee Coordination Group Roster
Reliability Issues Coordinated Action Plan
June 2011
15
SSttaannddiinngg CCoommmmiitttteeee CCoooorrddiinnaattiioonn GGrroouupp RRoosstteerr
Position
Name Title
Company City StateProvince
Phone E-mail
CCC Chair W Clay Smith
2100 East Exchange Place Tucker Georgia 30084-5336
(770) 270-7660 (770) 270-7938 Fax claysmithgasoccom
CCC Vice Chair Terry L Bilke
Director Standards and Compliance
Midwest ISO Inc 720 City Center Drive PO Box 4202 Carmel Indiana 46082-4202
317 249-5463 317 249-5358 Fax tbilkemidwestisoorg
CCC Vice Chair Brett Hallborg
Manager of Operations Training
BC Hydro | Grid Operations 8175 199th Street Langley British Columbia BC V2Y 0E2
(604) 455-1778 bretthallborgbchydroc
om
CIPC Chair Barry Lawson
Manager Power Delivery
National Rural Electric Cooperative Association 4301 Wilson Blvd EP11-253 Arlington Virginia 22203
(703) 907-5781 (703) 907-5517 Fax barrylawsonnrecacoo
p
CIPC Vice Chair Cyber
Charles F Abell PE Supervising Engineer
Ameren Corp 1901 Chouteau Ave MC-630 Saint Louis Missouri 63103
(314) 554-3817 (314) 206-0046 Fx cfabellamerencom
CIPC Vice Chair Physical Security
Robert D Canada Business Assurance Principal
Southern Company Services Inc 30 Ivan Allen Jr Blvd NW Bin 800 Atlanta Georgia 30308
(404) 506-5145 (404) 506-0190 Fax rdcanadasoutherncocom
OC Chair JS Holeman
Director System Operations
Duke Energy
(704) 382-0011 SamHolemanduke-energycom
Action Plan
Reliability Issues Coordinated Action Plan June 2011 16
Position
Name Title
Company City StateProvince
Phone E-mail
OC Vice Chair Tom Bowe
Executive Director of Compliance
PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403
610-666-4776 (610) 666-4287 Fx bowetpjmcom
PC Chair Tom Burgess
Director FERC Compliance
FirstEnergy Corp
330-384-5225 burgesstfirstenergycorpcom
PC Vice Chair Jeffrey L Mitchell
Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333
(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg
PCGC Chair Jacob Burger
Transmission System Control Coordinator
Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832
(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom
SC Chair Allen Mosher
Senior Director of Policy Analysis and Reliability
American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715
(202) 467-2944 (202) 467-2992 Fx amosherappanetorg
SC Vice Chair PS (Ben) Li
President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6
(647) 388-1498 (905) 887-2235 Fx benbenlica
REMG Representative
Edward A Schwerdt President and CEO
Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703
(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg
NERC Staff Roster
Reliability Issues Coordinated Action Plan
June 2011
17
NNEERRCC SSttaaffff RRoosstteerr
Position
Name Title
PhoneE-mail
NERC Staff Alvin J (AJ) Connor
Manager of Power System Analysis (609) 751-2579 ajconnornercnet
NERC Staff Tom Galloway
Senior Vice President and Chief Reliability Officer
(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet
NERC Staff Brian M Harrell
Manager of CIP Standards Training and Awareness
(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet
NERC Staff Larry J Kezele
Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet
NERC Staff Mark G Lauby
Vice President and Director of Reliability Assessment and Performance Analysis
(609) 452-8060 (609) 452-9550 Fax marklaubynercnet
NERC Staff Maureen E Long
Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet
NERC Staff Scott R Mix
CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet
NERC Staff Michael Moon
Director of Compliance Operations
(404) 446-2560 michaelmoonnercnet
NERC Staff Andrew Rodriquez Director of Standards Development
(404) 446-2560 andyrodriqueznercnet
NERC Staff Peter Knoetgen Director of Training and Accreditation
404-446-9688 peterknoetgennercnet
NERC Staff Herb Schrayshuen
Vice President and Director of Standards
((315) 439-1390 herbschrayshuennercnet
NERC Staff Mark Weatherford
Vice President and Chief Security Officer
(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet
Action Plan
Reliability Issues Coordinated Action Plan June 2011 16
Position
Name Title
Company City StateProvince
Phone E-mail
OC Vice Chair Tom Bowe
Executive Director of Compliance
PJM Interconnection LLC 955 Jefferson Ave Valley Forge Corporate Center Norristown Pennsylvania 19403
610-666-4776 (610) 666-4287 Fx bowetpjmcom
PC Chair Tom Burgess
Director FERC Compliance
FirstEnergy Corp
330-384-5225 burgesstfirstenergycorpcom
PC Vice Chair Jeffrey L Mitchell
Director - Engineering ReliabilityFirst Corporation 320 Springside Dr Suite 300 Akron Ohio 44333
(330) 247-3043 (330) 456-3648 Fx jeffmitchellrfirstorg
PCGC Chair Jacob Burger
Transmission System Control Coordinator
Nebraska Public Power District 2060 W Platte River Road Doniphan Nebraska 68832
(402) 845-5220 (402) 845-5238 Fx jjburgenppdcom
SC Chair Allen Mosher
Senior Director of Policy Analysis and Reliability
American Public Power Association 1875 Connecticut Avenue NW Twelfth Floor Washington DC 20009-5715
(202) 467-2944 (202) 467-2992 Fx amosherappanetorg
SC Vice Chair PS (Ben) Li
President Ben Li Associates Inc 37 Goldring Crescent Markham Ontario L6C 1Y6
(647) 388-1498 (905) 887-2235 Fx benbenlica
REMG Representative
Edward A Schwerdt President and CEO
Northeast Power Coordinating Council Inc 1040 Avenue of the Americas (6th Ave) 10th Floor New York New York 10018-3703
(212) 840-1070 (212) 302-2782 Fx eschwerdtnpccorg
NERC Staff Roster
Reliability Issues Coordinated Action Plan
June 2011
17
NNEERRCC SSttaaffff RRoosstteerr
Position
Name Title
PhoneE-mail
NERC Staff Alvin J (AJ) Connor
Manager of Power System Analysis (609) 751-2579 ajconnornercnet
NERC Staff Tom Galloway
Senior Vice President and Chief Reliability Officer
(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet
NERC Staff Brian M Harrell
Manager of CIP Standards Training and Awareness
(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet
NERC Staff Larry J Kezele
Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet
NERC Staff Mark G Lauby
Vice President and Director of Reliability Assessment and Performance Analysis
(609) 452-8060 (609) 452-9550 Fax marklaubynercnet
NERC Staff Maureen E Long
Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet
NERC Staff Scott R Mix
CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet
NERC Staff Michael Moon
Director of Compliance Operations
(404) 446-2560 michaelmoonnercnet
NERC Staff Andrew Rodriquez Director of Standards Development
(404) 446-2560 andyrodriqueznercnet
NERC Staff Peter Knoetgen Director of Training and Accreditation
404-446-9688 peterknoetgennercnet
NERC Staff Herb Schrayshuen
Vice President and Director of Standards
((315) 439-1390 herbschrayshuennercnet
NERC Staff Mark Weatherford
Vice President and Chief Security Officer
(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet
NERC Staff Roster
Reliability Issues Coordinated Action Plan
June 2011
17
NNEERRCC SSttaaffff RRoosstteerr
Position
Name Title
PhoneE-mail
NERC Staff Alvin J (AJ) Connor
Manager of Power System Analysis (609) 751-2579 ajconnornercnet
NERC Staff Tom Galloway
Senior Vice President and Chief Reliability Officer
(404) 446-2560 (609) 452-9550 Fax tomgallowaynercnet
NERC Staff Brian M Harrell
Manager of CIP Standards Training and Awareness
(202) 393-3998 (202) 393-3955 Fax brianharrellnercnet
NERC Staff Larry J Kezele
Manager of Operations (609) 524-7004 (609) 452-9550 Fx larrykezelenercnet
NERC Staff Mark G Lauby
Vice President and Director of Reliability Assessment and Performance Analysis
(609) 452-8060 (609) 452-9550 Fax marklaubynercnet
NERC Staff Maureen E Long
Director of Standards Process (404) 788-9067 (609) 452-9550 Fax maureenlongnercnet
NERC Staff Scott R Mix
CIP Technical Manager (609) 452-8060 (609) 452-9550 Fax scottmixnercnet
NERC Staff Michael Moon
Director of Compliance Operations
(404) 446-2560 michaelmoonnercnet
NERC Staff Andrew Rodriquez Director of Standards Development
(404) 446-2560 andyrodriqueznercnet
NERC Staff Peter Knoetgen Director of Training and Accreditation
404-446-9688 peterknoetgennercnet
NERC Staff Herb Schrayshuen
Vice President and Director of Standards
((315) 439-1390 herbschrayshuennercnet
NERC Staff Mark Weatherford
Vice President and Chief Security Officer
(202) 393-3998 (202) 393-3955 Fax markweatherfordnercnet