CIPC Executive Committee Update
CIPC MeetingMesa AZ
March 16, 2006
Barry Lawson
CIPC Vice-Chair
CIPC Confidentiality: Public Release
CIPC Executive Committee Activities
● Participated in Jan 19/06 PCIS meeting Discussed issues re: draft NIPP with new
DHS Under Secretary George Foresman Frank and open discussion re: issues such as
National Asset Data Base, risk assessment methodology, need for flexibility within each sector
General sense that DHS is listening to private sector concerns, and that NIPP will be moderated somewhat from previous versions
CIPC Executive Committee Activities
● NIPP-related actions Asked Risk Assessment WG to assess CIPC
risk assessment methodologies for suitability against NIPP criteria (ref. Risk Assessment Methodologies for Use by the Electricity Sector)
Successful discussions with DOE re: private sector concerns, hopefully will be addressed in Sector-Specific Plan
Final NIPP expected May 1 Sector-Specific Plans expected 6 months later
CIPC Executive Committee Activities
● Plan to meet with Government Coordinating Council (GCC) late April/early May Discuss how best to contribute to DOE’s development
of the Sector-Specific Plan Briefing by DHS of HITRAC’s Electricity sector threat
assessment, will determine value of briefing at June CIPC meeting
Discuss ESCC-GCC role with “Roadmap to Secure Control Systems in the Energy Sector”
Review process to change current ES threat level, and consider lowering from Yellow to Blue for the electricity sector
Develop electricity sector goals and metrics
CIPC Executive Committee Activities
● Confidentiality and information-sharing PCII policy document near-final development
by DHS legal counsel – expected to be released in “reasonably near future”
FACA issues for PCIS and SCC/GCCs under final review. Recommendation expected “soon” by DHS Secretary