Open Distributin NATF CIP 014-2 Requirement R1 Guideline Disclaimer This dcument was created by the Nrth American Transmissin Frum (NATF) t facilitate industry wrk t imprve physical security. NATF reserves the right t make changes t the infrmatin cntained herein withut ntice. N liability is assumed fr any damages arising directly r indirectly by their use r applicatin. The infrmatin prvided in this dcument is prvided n an as is basis. Nrth American Transmissin Frum and its assciated lg are trademarks f NATF. Other prduct and brand names may be trademarks f their respective wners. Cpyright 2017. All rights reserved. This legend shuld nt be remved frm the dcument. Open Distributin Cpyright 2017 Nrth American Transmissin Frum. Nt fr sale r cmmercial use. All rights reserved.
Open Distributin Dcument Intent The intent f this dcument is t prvide a general guideline t be used fr the risk assessment identified in Requirement R1 f CIP-014-2 Physical Security. It is recgnized that individual Transmissin Owners may use alternative and/r mre specific criteria that they may deem mre apprpriate fr their transmissin systems. Revisins Date Versin Ntes 01/19/2015 2015-1 Original Versin 03/02/2017 2017-1 All references t CIP-014-1 changed t CIP- 014-2 2
Open Distributin Purpse f CIP-014-2 as Defined in the Standard T identify and prtect Transmissin statins and Transmissin substatins, and their assciated primary cntrl centers, that if rendered inperable r damaged as a result f a physical attack culd result in instability, uncntrlled separatin, r Cascading within an Intercnnectin. Requirement R1 f the Standard Each Transmissin Owner shall perfrm an initial risk assessment and subsequent risk assessments f its Transmissin statin and Transmissin substatins (existing and planned t be in service within 24 mnths) that meet the criteria specified in Applicability Sectin 4.1.1. The initial and subsequent risk assessments shall cnsist f a transmissin analysis r transmissin analyses designed t identify the Transmissin statin(s) and Transmissin substatin(s) that if rendered inperable r damaged culd result in instability, uncntrlled separatin, r Cascading within an Intercnnectin. Guideline t Perfrm Transmissin Risk Assessment 1. Step One: The Transmissin Owner identifies statins t be analyzed based n applicability criteria 4.1.1. Nte 1: Statins are bth existing statins as well as thse planned t be in service within 24 mnths. Nte 2: The Facilities described in Applicability Sectin 4.1.1.1 thrugh 4.1.1.4 are the same as thse Transmissin Facilities that meet the bright line criteria 2.4 thrugh 2.7 fr Medium Impact Transmissin Facilities under Attachment 1 f Reliability Standard CIP-002-5.1 Nte 3: In perfrming this analysis, the general apprach is t take ut ne statin at a time, nt a cmbinatin f statins. A Transmissin Owner may determine it is apprpriate t take ut mre than ne statin at a time, as a result f tw r mre statins being in clse prximity t ne anther. An example f the type f factrs t cnsider, when cnsidering clse prximity, is where prximity is defined as having tw (r mre) substatins situated such that there is either (i) an easy line-f-sight between all f the substatin yards frm a single site, (ii) an easy access frm a cmmn public radway that exists between all f the substatin yards, r (iii) the substatin yards are in clse enugh prximity that a single event can impact bth substatins (e.g., the debris field frm a reasnable incendiary device set ff at ne yard will impact the ther yard). If such cnditins exist, cnsider gruping these substatins tgether befre prceeding and treat them as a single substatin when perfrming the next step. 2. Step Tw: The Transmissin Owner identifies cases/system cnditins t be analyzed. Cases/system cnditins shuld represent stressful system cnditins n the transmissin system based n the engineering knwledge and judgment f the planner perfrming the actual studies fr that Transmissin Owner s system. Pssible items fr cnsideratin are: summer peak vs. winter peak lad levels shulder peak lad levels with system transfers alternative generatin dispatch assumptins 3
Open Distributin alternative lad mdels (i.e., different penetratin f inductive lad) 3. Step Three: The Transmissin Owner defines the nature f the initiating event and hw it will be mdeled in the transmissin assessment. Pssible items fr cnsideratin are: an event that evlves ver several minutes allwing time fr system peratr interventin an effectively instantaneus event invlving an explsive r ther incendiary device that wuld result in a fault in the statin under attack, which wuld result in the peratin f prtective relays t remve the statin under attack frm the system 4. Step Fur: The Transmissin Owner is respnsible fr the develpment f criteria/prxies fr instability, uncntrlled separatin r Cascading, based n the engineering knwledge and judgment f its system. In develping the criteria fr the CIP-014-2 R1 assessment, the fllwing can be cnsidered: applicable reginal guidelines, if any pst-cntingency verlad percentage, abve applicable ratings, fr the Transmissin Owner s utility/regin pst-cntingency vltages r vltage deviatin amunt f lad lss amunt f generatin lss, including thse generating units lst due t instability if stability simulatins are perfrmed, the fllwing can be cnsidered: the transient vltage respnse, which includes bth the magnitude and duratin f vltage excursin negatively damped scillatins/prly damped r undamped scillatins tripping f lines because f apparent impedance frequency excursins 5. Step Five: The Transmissin Owner perfrms apprpriate steady-state pwer flw and/r stability analysis. As the Transmissin Owner develps its specific prcess fr perfrming steady-state and/r stability analysis, the Transmissin Owner may cnsider incrprating the fllwing cncepts: Steady-state pwer flw analysis In perfrming the steady-state pwer flw analysis, cnsider an utage f the entire statin as identified in step ne and examine the immediate respnse f the pwer system t the lss f that substatin. That is, all buses in a physically cntiguus statin are islated frm the transmissin system remtely by pening crrespnding breakers accrding t an actual breaker diagram. Upn utility discretin, events at statins, already identified under ther planning studies that d nt fllw this assumptin but cause greater impact, can be substituted fr assuming all lines int a substatin are remved (e.g., a situatin where lss f part f the statin as ppsed t the entire statin creates a mre severe system impact). 4
Open Distributin In perfrming the steady-state analysis, the Transmissin Owner needs t define what srt f peratr actin/planner discretin will be allwed at each step f the analysis, which wuld result in the eliminatin/screening ut f a statin as a CIP-014-2 R1 critical facility statin. Examples f peratr actin/planner discretin are: When all lading is belw Transmissin Owner defined acceptable threshld fr assuming peratr actin t mitigate verlads, the statin may be screened ut. Typical limitatins n mitigatin measures impsed under TPL standards (such as lss f lcal lad) d nt apply. Event cascades but is limited in scpe t a defined area f acceptable size (i.e., is determined t nt have a critical impact n the peratin f the Intercnnectin). Event cascades but if prject(s) (e.g., ancillary equipment upgrade) can and will be quickly initiated t eliminate/mitigate scpe f cascading t an area f acceptable size. Fr simulatins where slutin cnvergence is btained, lines fund t verlad beynd their acceptable threshld limits (e.g., including prtectin limits if knwn) will be taken ut f service and a new slutin will be attempted. This prcess will be repeated until either n lines verlad past their acceptable threshld limits r the prcess has been repeated a defined number f times, as determined by the Transmissin Owner, and cntinues t result in lines verlading past their acceptable threshld limits (i.e., Cascading). Bus vltages assessed as defined in Step Fur abve. Amunt f lad lss assessed as defined in Step Fur abve. Amunt f generatin lss assessed as defined in Step Fur abve. Analysis shuld include mnitring f facilities in systems beynd the system in which the statin being analyzed is lcated. Fr cascading beynd a Transmissin Owner area, neighbring Transmissin Owners shuld wrk tgether as necessary t determine the extent f the cascading event(s). Fr simulatins where slutin cnvergence is nt btained, the Transmissin Owner may want t cnsider further analysis t determine the cause f the nn-cnvergence. Stability analysis (if perfrmed) If perfrming stability analysis, the analysis needs t cnsider the fllwing: The nature f the fault in the statin(s) being analyzed (e.g., single phase fault, 3-phase fault, etc.). The placement f the fault in the statin(s) being analyzed (e.g., fault lcated n highest vltage bus f statin being tested, fault lcated n all busses in statin being tested, etc.). 5
Open Distributin Hw the fault will be cleared (e.g., nrmal clearing by breakers in statin being analyzed, remte clearing with nrmal clearing time, remte clearing with time delay due t lss f relay cmmunicatin channels, etc.). Generatr rtr angles assessed fr ptential transient instability issues as defined in Step Fur abve. Oscillatin respnse assessed fr negatively damped scillatins/prly damped r undamped scillatins as defined in Step Fur abve. Transient vltage respnse (if applicable) assessed per transient vltage criteria as defined in Step Fur abve. Assessment f ther stability criteria as defined in Step Fur abve. In assessing the stability analysis results, results shuld be viewed as stated in bth the March 17, 2014, Order (paragraph 6), the July 17, 2014, NOPR (paragraph 25) and the Nvember 20, 2014, Order (paragraph 33) t assess if the lss f the specific Transmissin statin r Transmissin substatin qualifies as a critical facility where: A critical facility is ne that, if rendered inperable r damaged, culd have a critical impact n the peratin f the intercnnectin thrugh instability, uncntrlled separatin r cascading failures n the Bulk-Pwer System. The instability f a single generatr r multiple generatrs due t the lss f a Transmissin statin/substatin des nt necessarily mean that that Transmissin statin/substatin is a critical facility. Rather, the threshld fr critical facility is tied t hw the lss f the Transmissin statin/substatin impacts the brader Intercnnectin. 6