Panelists made suggestions regarding CIP-014-3 applicability provisions and their ability to identify the correct Facilities requiring physical security protection plans. Discussions included:
- The potential addition of more Facilities to be covered under the standards.
- The need for criteria to identify the risks from multiple simultaneous physical attacks on transmission lines and substations.
- How to identify what levels of load loss (due to undervoltage load shedding and stability loss) should be considered when identifying the facilities to be protected with physical security plans.
- The amount of load loss that requires scrutiny for security breach events is likely dependent on the operational area where the entity operates.
- The need for this operating area context and whether facilities that perform physical security monitoring functions (that are not currently explicitly subject to CIP-014-3) should be considered for inclusion in the applicability provisions of CIP-014-3 as well.
- The need for a performance-based approach to verifying security system performance for future standard enhancement.