***** EXTERNAL email. Please be cautious and evaluate before you click on links, open attachments, or provide credentials. *****

NOTICE DATE:  February 22, 2019
NOTICE TYPE:  M-A022219-01 General
SHORT DESCRIPTION:  ERCOT Critical Infrastructure Protection Working Group
DAY AFFECTED:  March 1, 2019
LONG DESCRIPTION:  The ERCOT Critical Infrastructure Protection Working Group (CIPWG) provides a forum to share information and experiences related to cyber security, physical security, compliance, operational security, tools and techniques. The ERCOT CIPWG coordinates with state and federal organizations on matters related to threats, vulnerabilities and risks associated with protection of critical infrastructure and utility facilities.
There have been some recent changes to the monthly CIPWG meetings. These changes are designed to facilitate broader meeting participation and the exchange of valuable information on topics that impact the electric industry.
The open sessions of the monthly meetings are now available via WebEx. During the open sessions, unclassified security-related briefings are periodically provided by the Public Utility Commission of Texas, Department of Homeland Security, Department of Public Safety, Department of Energy, Federal Bureau of Investigation and Electric Sector Information Sharing & Analysis Center (E-ISAC). Regulatory compliance information is also presented.  In addition to the open sessions, there are monthly closed sessions for more detailed discussion of risks and concerns.
A quarterly security workshop has been added. These are closed sessions where specific implementations are reviewed in order to provide best practices examples. Regulatory compliance is not an agenda item for the workshops. Below is the agenda for the March 1, 2019 quarterly security workshop.

*         Physical security designed based threat analysis

*         Visitor management

*         Physical security best practices, lessons learned and pitfalls

*         Patch management solutions and trends

*         Secure information sharing proof of concept

ADDITIONAL INFORMATION:  In order to attend any closed session, a confidentiality agreement is required.
CONTACT:  If you have any questions, please contact your ERCOT Account Manager. You may also call the general ERCOT Client Services phone number at (512) 248-3900 or contact ERCOT Client Services via email at [log in to unmask]<mailto:[log in to unmask]>.
If you are receiving email from a public ERCOT distribution list that you no longer wish to receive, please follow this link in order to unsubscribe from this list: http://lists.ercot.com.