LISTSERV - NOTICE_OPERATIONS Archives

***** EXTERNAL email. Please be cautious and evaluate before you click on links, open attachments, or provide credentials. *****

NOTICE DATE: March 30, 2020

NOTICE TYPE: M-A030220-02 NPRR

SHORT DESCRIPTION: Reminder: Implementation details of NPRR928

INTENDED AUDIENCE: ERCOT Market Participants

DAYS AFFECTED: April 3, 2020

LONG DESCRIPTION: NPRR928 establishes Market Participant notification responsibilities with respect to Cybersecurity Incidents. On March 13, 2020, ERCOT implemented Phase 1 of NPRR928. On April 3, 2020, the remaining Protocol language related to NPRR928 will be implemented.

Phase 1 Implementation: March 13, 2020

On March 13, 2020, the Protocol sections listed below were implemented to allow current Market Participants to submit Cybersecurity Contact information to ERCOT through the Notice of Change of Information (NCI) form (Protocol Section 23 Form E), and prospective Market Participants to designate a Cybersecurity Contact in the application process (Protocol Section 23 Forms A, B, G, I, J & M). In Phase 1, ERCOT unboxed the Notice of Cybersecurity Incident form (Protocol Section 23 Form O) to allow Market Participants to voluntarily utilize the form, if necessary, prior to implementation of Phase 2.

Section 2.1 (Definitions: Cybersecurity Contact, Cybersecurity Incident)
Paragraph (1) of Section 16.19, Cybersecurity Incident Notification
Section 23 Form A: Congestion Revenue Right (CRR) Account Holder Application for Registration
Section 23 Form B: Load Serving Entity (LSE) Application for Registration
Section 23 Form E: Notice of Change of Information
Section 23 Form G: QSE Application and Service Filing for Registration Form
Section 23 Form I: Resource Entity Application for Registration
Section 23 Form J: Transmission and/or Distribution Service Provider Application for Registration
Section 23 Form M: Independent Market Information System Registered Entity (IMRE) Application for Registration
Section 23 Form O: Notice of Cybersecurity Incident

Phase 2 Implementation: April 3, 2020

On April 3, 2020, the remaining Protocol language related to NPRR928 will be implemented.

Section 1.3.1.1, Items Considered Protected Information
Section 1.3.4, Protecting Disclosures to the PUCT and Other Governmental Authorities
Section 1.3.5, Notice Before Permitted Disclosure
Section 1.3.6, Exceptions
Paragraphs (2) – (6) of section 16.19, Cybersecurity Incident Notification

ACTION REQUIRED: Prior to April 3, 2020, Market Participants should designate a Cybersecurity Contact for communications with ERCOT with respect to Cybersecurity Incidents, using the Notice of Change of Information (NCI) form in Protocol Section 23 Form E.

ADDITIONAL INFORMATION: Implementation details of NPRR928 will be further discussed at the 04/01/2020 TAC meeting. NPRR928 and associated documents can be found on the ERCOT website.

CONTACT: If you have any questions, please contact your ERCOT Account Manager. You may also call the general ERCOT Client Services phone number at (512) 248-3900 or contact ERCOT Client Services via email at [log in to unmask].

If you are receiving email from a public ERCOT distribution list that you no longer wish to receive, please follow this link in order to unsubscribe from this list: http://lists.ercot.com.