UNITED STATES OF AMERICA
BEFORE THE
FEDERAL ENERGY REGULATORY COMMISSION
Version 4 Critical Infrastructure)Docket No.RM11-11-000
Protection Reliability Standards)
Version 5 Critical Infrastructure)Docket No.RM13-5-000
Protection Reliability Standards)
COMMENTS OF THE ISO/RTO COUNCIL IN SUPPORT OF
EMERGENCY REQUEST FOR DELAY OF COMPLIANCE DEADLINE
Pursuant to Rule 213 of the Rules of Practice and Procedure of the Federal Energy
Regulatory Commission1 (the “Commission”), the ISO/RTO Council (“IRC”) submits these
comments in support of the Emergency Request for Delay of Compliance Deadline filed on July 17, 2013 by the American Public Power Association, the Edison Electric Institute, the Electricity Consumers Resource Council, the Electric Power Supply Association, the Large Public Power Council, the National Rural Electric Cooperative Association and the Transmission Access
Policy Study Group (the “Emergency Request”).
I.IDENTIFICATION OF FILING PARTY
The IRC is comprised of the Alberta Electric System Operator (“AESO”); California
Independent System Operator Corporation (“CAISO”); Electric Reliability Council of Texas, Inc. (“ERCOT”); the Independent Electricity System Operator (“IESO”); ISO New England Inc. (“ISO-NE”); Midcontinent Independent System Operator, Inc. (“MISO”); New York
Independent System Operator, Inc. (“NYISO”); PJM Interconnection, L.L.C. (“PJM”); and
Southwest Power Pool, Inc. (“SPP”).2
1 18 C.F.R § 385.213 (2013).
2 AESO and IESO are not FERC-jurisdictional. AESO is not joining in these comments.
DMEAST #17348772 v2
II.COMMENTS
The Emergency Request asks the Commission to delay the deadline for complying with Version 4 of the Critical Infrastructure Protection (“CIP”) Reliability Standards (“CIP Version 4”) of the North American Electric Reliability Corporation (“NERC”), which are currently
scheduled to become effective on April 1, 2014, pending action in a rulemaking proceeding on a proposed Version 5 of the CIP Reliability Standards (“CIP Version 5”). As the Emergency
Request explains, absent such relief, entities registered with NERC will need to begin expending substantial time and resources this summer in order to meet the current April 1, 2014 deadline for complying with CIP Version 4, even though CIP Version 4 is expected to be retired before it takes effect, enabling registered entities to transition directly from Version 3 of the CIP
Reliability Standards (“CIP Version 3”) to CIP Version 5.3
The IRC supports the Emergency Request, for many of the reasons set forth therein.
With the existing effective date of April 1, 2014 for CIP Version 4, registered entities, including
the ISOs and RTOs, are required to prepare for compliance with CIP Version 4 despite the
Commission’s proposal to move directly from CIP Version 3 to CIP Version 5. This is an
inefficient and ineffective outcome resulting solely from a potential timing gap between the
effective dates of CIP Versions 4 and 5.4 Accordingly, to prevent this unproductive result from
occurring, the IRC supports the Emergency Request to delay CIP Version 4 from becoming
effective.
3 As indicated in its earlier comments in Docket No. RM13-5-000, the IRC agrees with the Commission that CIP
Version 5 represents a marked improvement over CIP Version 3, and - given the superiority of CIP Version 5 to
CIP Version 4 - concurs with the Commission that it is appropriate to retire CIP Version 4 without its ever going
into effect.
4 Registered entities will be required to prepare for compliance with CIP Version 4. Although the degree of
preparation that has and/or will be required to prepare for CIP Version 4 will differ between entities, it seems
wasteful to require any further preparation for compliance with CIP Version 4 given the Commission’s proposal to move straight from CIP Version 3 to CIP Version 5.
2
DMEAST #17348772 v2
More specifically, and as noted in the Emergency Request, CIP Version 4, with its
“bright line” criteria, is premised on a significantly different approach from CIP Version 5,
which uses a more granular approach that assigns each BES Cyber System a low, medium or
high impact (with compliance requirements corresponding to each of those categories). Thus, the implementation of CIP Version 5 following the implementation of CIP Version 4 may result in modifications to the critical asset identification and the compliance obligations that would
flow from those changes for facilities that may be deemed critical assets under CIP Version 4, but under CIP Version 5 will only be low or medium impact BES Cyber Systems. By granting the Emergency Request and thereby delaying the implementation of CIP Version 4, the
Commission will enable organizations to better focus their resources and more rapidly achieve the enhanced security gains associated with CIP Version 5.
III.CONCLUSION
For the foregoing reasons, the IRC respectfully requests that the Commission
expeditiously grant the Emergency Request.
Respectfully submitted,
/s/ Matthew Morais/s/Theodore J. Paradise
Matthew MoraisRaymond W. Hepper
Assistant General CounselVice President, General Counsel, and Secretary
Electric Reliability Council of Texas, Inc.Theodore J. Paradise
7620 Metro Center DriveAssistant General Counsel - Operations and
Austin, Texas 78744Planning
ISO New England Inc.
One Sullivan Road
Holyoke, MA 01040-2841
3
DMEAST #17348772 v2
/s/ Stephen G. Kozey/s/ Paul Suskie
Stephen G. KozeyPaul Suskie
Vice President, General Counsel, andSr. VP - Regulatory Policy and General Counsel
SecretarySouthwest Power Pool, Inc.
Midcontinent Independent System201 Worthen Drive
Operator, Inc.Little Rock, AR 72223
P.O. Box 4202
Carmel, Indiana 46082-4202
/s/ Anna McKenna/s/ Carl F. Patka
Nancy SaracinoCarl F. Patka
General CounselAssistant General Counsel
Roger CollantonRaymond Stalter
Deputy General CounselDirector, Regulatory Affairs
Anna A. McKennaNew York Independent System Operator,
Assistant General Counsel-RegulatoryInc.
California Independent System Operator10 Krey Blvd
CorporationRensselaer, New York 12144
250 Outcropping Way
Folsom, California 95630
/s/ Craig Glazer/s/ Jessica Savage
Craig GlazerJessica Savage
Vice President - Federal Government PolicySupervisor, Regulatory Affairs
Robert EckenrodIndependent Electricity System Operator
Assistant General CounselStation A, Box 4474
PJM Interconnection, LLCToronto, Ontario M5W 4E5
1200 G Street, N.W. Suite 600 Washington, D.C. 20005
Dated: August 5, 2013
4
DMEAST #17348772 v2