Market Participant Comment and Rationale Form AESO AUTHORITATIVE DOCUMENT PROCESS

Market Participant Comment and Rationale Form
AESO AUTHORITATIVE DOCUMENT PROCESS
Market Participant Consultation Draft
2013-12-12
Consultation on Proposed New Critical Infrastructure Protection (“CIP”) Alberta Reliability Standard:
CIP-006-AB-5 Physical Security of BES Cyber Systems (“CIP-006-AB-5”)
Date of Request for Comment [yyyy/mm/dd]:
Period of Consultation [yyyy/mm/dd]:
Comments From:
AltaLink
Date [yyyy/mm/dd]:
2014/02/07
2014/02/07
2013/12/12
through
2014/02/07
Contact:
Rick Spyker
Phone:
403-267-3433
E-mail:
[email protected]
Listed below is the summary description for the proposed new sections of the Alberta reliability standards. Please refer back to the Consultation Letter under the “Attachments” section to view the
actual proposed content to the Alberta reliability standards. Please place your comments/reasons for position underneath (if any).
1. CIP-006-AB-5
a) New
The AESO is seeking comments from market participants with regard to the
following matters:
1. Are there any requirements contained in CIP-006-AB-5 that are not clearly
articulated? If yes, please indicate the specific section of CIP-006-AB-5,
describe the concern and suggest alternative language.
2. Do market participants have any concerns that CIP-006-AB-5 is not capable of
being applied in Alberta? If appropriate, please indicate the specific section of
CIP-006-AB-5 and describe the concern.
3. Do market participants disagree with any CIP-006-AB-5 Alberta variances that
are contained in CIP-006-AB-5? If appropriate, please indicate the specific
section of CIP-006-AB-5, describe the concern and suggest alternative
language.
Issued for Market Participant Consultation: 2013-12-12
Market Participant Comments and/or Alternative
Proposal
Comment # 1:
AESO Replies
AESO Reply # 1: AESO to provide
We require clarification in relation to R1 – 1.3.
What applications / methods will meet the requirement of
“two or more different physical access controls” for High
Impact sites? We have the ACC and potentially the Data
Centre which are accessed controlled via card readers, will
we require a second means?
Comment # 2:
We require clarification in relation to R1 – 1.8
Will we require automated logging of entry into Medium
Impact sites? This applies to our substations. Currently
entry is controlled via restricted keys and an alarm system.
People authorized for access are to call the ACC and log
their entry – would this satisfy your requirement?
Page 1 of 2
b) Other
[Note to Market Participants: please copy and paste the section of CIP-006-AB-5
being commented on here]
Issued for Market Participant Consultation: 2013-12-12
Comment # 1: Insert Comments / Reason for Position (if
any)
AESO Reply # 1: AESO to provide
Page 2 of 2