About the Workshop

The North American Electric Reliability Corporation (NERC)’s Critical Infrastructure Protection (CIP) Version 5 is here. The April 1, 2016 for compliance deadline for Medium Impact Facilities will be here before you know it. Now is the time to start developing your compliance program. Get hands-on guidance and best practices from regulatory experts as well as utility staff that have been through prior CIP audits, at the September 2014 workshop offered by APPA.

This is a closed training workshop (no regulators or NERC staff). The engaging roundtable format encourages all attendees to:

  • Share best practices, concerns, and challenges
  • Learn from what’s worked and what hasn’t for others
  • Get answers to CIP compliance questions

Learn more in the Conference Brochure.

Download the Conference Program.

Who Should Attend

  • Public power utilities registered as BA, GO/GOP, TO/TOP and have been identified as Medium Impact Facilities based on CIP-002-5
  • NERC CIP senior managers and compliance personnel
  • SCADA and control system personnel
  • Cyber and physical security personnel
  • Senior managers in charge of capital improvements and budgets
  • Power plant managers faced with new compliance obligations

Whether you’re just starting to develop your CIP compliance program or well on your way to being prepared for 2016, there’s much you can learn and share at this workshop.

Receive a $100 discount when you register with a colleague!

Workshop Agenda

Monday, Sept. 29

8 - 8:30 a.m.


8:30 - 8:45 a.m.

Welcome and Introductions

8:45 - 10:15 a.m.

Technical Issues for Compliance
Learn about and join a roundtable discussion on topics covered by CIP 002-005

  • CIP 002-5 - BES Cyber System Categorization
  • CIP 003-5 - Security Management Controls
  • CIP 004-5 - Personnel & Training
  • CIP-005-5 - Electronic Security Perimeter(s)

10:15 - 10:30 a.m.


10:30 a.m. - 12 p.m.

Technical Issues for Compliance
Learn about and join a roundtable discussion on topics covered by CIP 006-008

  • CIP-006-5 - Physical Security of BES Cyber Systems
  • CIP 007-5 - System Security Management
  • CIP 008-5 - Incident Reporting and Response Planning

12 p.m. - 1:15 p.m.

Lunch on your own

1:15 p.m. - 2:30 p.m.

Technical Issues for Compliance
Learn about and join a roundtable discussion on topics covered by CIP 009-011

  • CIP 009-5 - Recovery Plans for BES Cyber Systems
  • CIP 010-1 - Configuration Change Management and Vulnerability Assessments
  • CIP 011-1 - Information Protection

Speaker: Carter Manucy, Cyber Security Manager, Florida Municipal Power Agency, Orlando, Fla.

2:30 - 2:45 p.m.


2:30 - 4:30 p.m.

Processes and Procedures to Meet Compliance Deadlines
Gear up with a case study — see how one public power utility’s program was set up to engage with various departments to develop a CIP V5 compliance program. Join the discussion to share your experiences and lessons learned.

Speaker: Paul Crist, Chief Technology Officer & Vice President, Lincoln Electric System, Neb.


Tuesday, Sept. 30

8 - 8:30 a.m.

Recap of discussion of previous day's material

8:30 - 9:00 a.m.

Planning Resources/Budget Considerations for Compliance Implementation and Maintenance
In addition to an overall discussion on budget considerations, attendees will learn about compliance implementation cost estimates, recurring costs, man hours to implement and full-time employee estimates for CIP V5 implementation.

Speaker: Carter Manucy, Cyber Security Manager, Orlando, Fla.

9 - 10 a.m.

Developing the Proper Documentation for a CIP Audit
The key to a successful CIP audit is having the proper documentation.  Learn how one utility has developed their processes and procedures to collect and prepare their documentation for audit. Join the discussion to share your experiences and lessons learned.

Speaker: Marc Grayson, NERC CIP Program Manager, Salt River Project, Ariz.

10 – 10:15 a.m.


10:15 - 11:15 a.m.

Compliance Considerations: Making the Transition
Hear about the utility experience in a CIP Version 3 to Version 5 transition pilot. Participate in a discussion and discuss the challenges in changing your current compliance program.

Speaker: Scott Saunders, Information Security Officer, Sacramento Municipal Utility District, Calif.

11:15 -12:30 p.m.

What’s Happening with CIP Version 5 Revisions?
Discover how the CIP Version 5 revisions will actually translate into compliance requirements and understand what it will take to comply with the revisions.

Speakers: Scott Saunders, Information Security Officer, Sacramento Municipal Utility District, Calif.; and Nathan Mitchell, Director, Electric Reliability Standards & Compliance, American Public Power Association, Washington, D.C.

Wrap up and Next Steps

Registration and Hotel Information

 Registration Form

 Register Online


Registration Fees

Registration received on or before Sept. 8

  • APPA Members   $445
  • Nonmembers     $645

Registration received after Sept. 8

  • APPA Members  $495
  • Nonmembers    $695

Beverage breaks are included in the registration fee. All meals are on your own.

Registrants who cancel in writing on or before September 22, 2014 are entitled to a refund of the registration fee, minus a $50 cancellation fee. Registrants who cancel after September 22 will not receive a refund, but attendees substitutions will be allowed for this event only. . Registrants and no-shows who do not cancel by September 22 are responsible for the full registration fee and are not entitled to a refund. Cancellations must be made in writing and emailed to: Registration@PublicPower.org.

Hotel Information
Scottsdale Resort and Conference Center
7700 East McCormick Parkway
Scottsdale, AZ 85258

APPA Room Rate
$169 Single/Double, plus taxes

480/991-9000 OR 800/540-0727
Please make your hotel reservations directly with the Scottsdale Resort and Conference Center. You must make your reservations prior to Sept. 8, 2014, to guarantee your spot in the room block. It is possible for the block to sell out prior to Sept. 8, so make your reservations early. Reserve online at http://gc.synxis.com/rez.aspx?Hotel=62322&Chain=5156&arrive=9/27/2014&depart=10/4/2014&adult=1&child=0&group=APPAFA100514

Travel arrangements and costs are the responsibility of the participants. APPA will not reimburse for changes in travel expenditures regardless of the cause, including the cancellation of the workshop.

Contact educationinfo@publicpower.org.


Accreditation & Certification
Attendees of the 2014 NERC CIP Version 5 Compliance Program Development Workshop will have the opportunity to earn up to 1.0 Continuing Education Units (CEUs), 10.5 Professional Development Hours (PDHs), or 12 Continuing Professional Education (CPE) credit hours.

The American Public Power Association has been has been accredited as an Authorized Provider by the International Association for Continuing Educa¬tion and Training (IACET). In obtaining this accreditation, APPA has demonstrated that it complies with the ANSI/IACET Stan¬dard, which is recognized internationally as a standard of good practice. As a result of its Authorized Provider status, APPA is authorized to offer IACET CEUs for its programs that qualify under the ANSI/IACET Standard.

For more information on APPA’s certification status, atten¬dance requirements, and obtaining attendance transcripts, visit www.APPAAcademy.org under “Accreditation” or contact educationinfo@publicpower.org.

The American Public Power Association is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website www.learningmarket.org.

APPA is pleased to offer conference delegates verification of attendance for up to 12 CPE credit hours for attending the workshop. There are no prerequisites for the courses offered; no advanced preparation is required. All courses are group-live offerings; program level should be considered ‘basic” unless otherwise noted. All CPEs will be offered in the “Specialized Knowledge and Applications” area of study.

For more information regarding administrative policies, such as clarification of requirements, complaints, and refunds, please educationinfo@publicpower.org.

Professional Development Hours
APPA educational practices are consistent with the criteria for awarding Professional Development Hours (PDHs) as established by the National Council of Examiners for Engineering and Surveying (NCEES). Course eligibility and number of CEUs/PDHs may vary by state.

To receive continuing education credits (CEUs, PDHs, CPEs), attendees are required to attend and participate in the conference sessions for which they request continuing education credits, turn in the Verification of Attendance form at the end of the workshop and complete the online workshop evaluation that is sent out immediately after the workshop concludes.