Topic:"Cybersecurity" in M12412

17 Table 6: FTE Positions under the Administration Salaries and Wages Cost Category Positions Description IT and Cybersecurity Specialist This role is responsible for the maintenance, configuration, and reliable operation of the NSIESO's c...

AI summary This section outlines two FTE positions under the Administration Salaries and Wages Cost Category: an IT and Cybersecurity Specialist responsible for maintaining and securing the NSIESO's systems, and a Financial Analyst tasked with analyzing financial data to support financial decisions.

- 3 a. Technology Needs Assessment and Business Case: These costs are for internal asset and 4 systems inventory reviews to be conducted by an external consultant to assess systems 5 currently in-use by NSPI and a needs assessment for tech...

AI summary The text outlines various costs related to technology assessments, office leasing, cybersecurity, and control center planning for the NSIESO. These include assessments by external consultants, temporary office space in Halifax, cybersecurity monitoring services, and planning for control center locations, informed by a previous cybersecurity incident inquiry.

1 Request IR - 28 - 2 Reference: Exhibit B-2 (page 27 of 36, line 1, Table 13 & lines 13-14)…"Cybersecurity and - 3 Monitoring: These costs are for external cybersecurity monitoring and response services, based - 4 on vendor quotes". - 5 a...

AI summary The request seeks clarification on the cybersecurity services included in the $0.18M forecast, specifically asking for copies of the vendor quotes that support the cost estimate.

- With respect to Cybersecurity and Monitoring: - a) How were the vendors chosen to obtain quotes? - b) Has the NSIESO sought any guidance or feedback on any of the vendors from other system operators or utilities? - c) Please outline the...

AI summary The text raises questions about the NSIESO's cybersecurity and monitoring practices, including vendor selection, guidance sought from other utilities, and the NSIESO's understanding of NERC reliability standards.

Response IR - 23 a) To clarify the referenced evidence, the $0.18 million estimate for Cybersecurity and Monitoring was developed using preliminary information obtained from informal discussions with vendors experienced in cybersecurity mo...

AI summary The response provides clarification on the $0.18 million estimate for Cybersecurity and Monitoring, noting it is based on preliminary vendor discussions and not yet finalized. The NSIESO has not selected a vendor and will obtain quotes once it goes to market.

NON-CONFIDENTIAL 21 from the forecast will be recorded and reconciled through the Net OM&A Deferral and 22 Variance Account. 23 b) The NSIESO has not formally sought feedback from other system operators or utilities on 24 specific vendors....

AI summary The NSIESO (NSEB) outlines its approach to managing Net OM&A Deferral and Variance Account reconciliations, plans to engage peers on cybersecurity, and prepares for NERC CIP compliance post-transition from NSPI. It emphasizes incorporating NERC standards into planning and hiring cybersecurity roles to ensure readiness.

Response IR – 3 - a) To clarify referenced evidence, the $0.05 million estimate was informed by high-level market information and informal discussions with insurance providers regarding coverage for small to mid-sized organizations handlin...

AI summary The response outlines the basis for the cybersecurity insurance estimate of $0.05 million, which is based on preliminary inputs and informal discussions. It also notes that stakeholder engagement costs of $0.05 million are ongoing and not one-time expenses.

- Facilities and Technology ($0.87M), on pages 26-27 of 36 and respond to the following: - a) Please provide an itemization of the cybersecurity and monitoring cost of $0.18M (referenced on page 27) and confirm the relationship of costs be...

AI summary The document requests an itemization of cybersecurity and monitoring costs of $0.18M and an explanation of how these costs will be impacted once NSIESO responsibilities are fully phased in.

Response IR - 7 - a) Please refer to Response to NSEB IR-23 for further detail on the cybersecurity and monitoring forecast. For clarification on the referenced evidence, the $0.18 million estimate is not further itemized at this stage. It...

AI summary The response outlines anticipated cybersecurity and monitoring costs, distinguishing between vendor services, insurance coverage, and internal staffing. It also notes that costs are expected to increase once the NSIESO assumes operational control of the bulk power system.

verage for leased commercial property. However, upon further inquiry with the NSIESO, their response to DGT-IR-14 clarified that the estimate of $0.005 million was informed by general market knowledge of typical property insurance premiums...

AI summary The document outlines estimated insurance and communications costs for the NSIESO. Cybersecurity insurance is estimated at $0.05 million based on preliminary market information, while property insurance is estimated at $0.005 million. The communications plan involves engaging a senior communications consultant with an estimated cost of $45,000. These figures are based on informal discussions and general market knowledge, with no formal quotes obtained yet.

Request IR-7: Refer to the Application and Exhibit B-2 - Ongoing OM&A Cost Category Detail , subsection G, Facilities and Technology ($0.87M), on pages 26-27 of 36 and respond to the following: M12412, Exhibit N-1(i), the Application Exhib...

AI summary The document includes several requests for information related to cybersecurity, financing, transition costs, deferral accounts, and the affiliate status of NSIESO. These requests aim to clarify cost itemizations, regulatory impacts, and financial arrangements during the transition period.

Non-Confidential To: The Nova Scotia Independent Energy System Operator ("NSIESO") 15. Reference: Exhibit B-2 (page 22 of 36, lines 12-16)… "Cybersecurity Insurance: The estimate of $5,000/month for the first 10 months is intended to cover...

AI summary The document requests detailed support for the NSIESO's Cybersecurity Insurance forecast of $0.05 million, specifically regarding the estimated coverage for small to mid-sized organizations handling sensitive information during the initial phase of operations.