High Priority Issues Description The RISC unanimously concluded that the issues should be the top strategic focus for the ERO. High Priority Issues Current NERC Efforts in this Area Average Dollars ESISAC Implementation of DoE/DHS/WH Electricity Subsector Cyber Attack: We have an event Cybersecurity Capability Maturity Model caused by a cyber attack on BES cyber $18.46 Enforcement of CIP Standards assets. CIP Audits CIPC Efforts Workforce Capability and Human Certification Error: We have an event because Training someone (e.g., an operator or a field $12.77 Enforcement of PER Standards technician) makes a mistake or has an Events Analysis program error in judgment. System Protection Coordination Standards Project Generator Relay Loadability Standards Project Protection Systems Misoperations Standards Project Protection Systems: We have an event Protection System Misoperation Task Force become worse due to a protection $12.00 System Protection and Control Subcommittee system failing to operate correctly. Maintenance and Testing Corrective Action Plans Enforcement of PRC and TPL Standards Certification and Registration Monitoring and Situational RCIS Awareness: We have an event due to Events Analysis Program a control center or similar facility Lessons Learned $11.69 either not receiving or understanding NERC Alerts information related to system SAFNR II conditions. NERC Bulk Power System Awareness TOTAL: $54.92 Next For each of these issues: Are the existing efforts sufficient, or do we need to add new efforts or make or incremental improvements to what we have? Ensure that any new effort is in NERC’s scope or appropriately directed to the right organization.
High Priority Issues Description The RISC unanimously concluded that the issues should be the top strategic focus for the ERO. High Priority Issues Current NERC Efforts in this Area Average Dollars Cyber Attack: We have an event caused by a cyber attack on BES cyber assets. ESISAC Implementation of DoE/DHS/WH Electricity Subsector Cybersecurity Capability Maturity Model Enforcement of CIP Standards CIP Audits CIPC Efforts $18.46 Workforce Capability and Human Error: We have an event because someone (e.g., an operator or a field technician) makes a mistake or has an error in judgment. Certification Training Enforcement of PER Standards Events Analysis program $12.77 Protection Systems: We have an event become worse due to a protection system failing to operate correctly. System Protection Coordination Standards Project Generator Relay Loadability Standards Project Protection Systems Misoperations Standards Project Protection System Misoperation Task Force System Protection and Control Subcommittee Maintenance and Testing Corrective Action Plans Enforcement of PRC and TPL Standards $12.00 Monitoring and Situational Awareness: We have an event due to a control center or similar facility either not receiving or understanding information related to system conditions. Certification and Registration RCIS Events Analysis Program Lessons Learned NERC Alerts SAFNR II NERC Bulk Power System Awareness $11.69 TOTAL: $54.92 Next For each of these issues: Are the existing efforts sufficient, or do we need to add new efforts or make or incremental improvements to what we have? Ensure that any new effort is in NERC’s scope or appropriately directed to the right organization.