Enron Mail

From:ecarmetsc@aep.com
To:amie.ha@enron.com, justin.laverell@enron.com
Subject:hotline call 10/12/01
Cc:
Bcc:
Date:Fri, 12 Oct 2001 09:43:26 -0700 (PDT)

fyi's, here is a summary of the hotline call today:
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
NERC - Alert level 3 continues (full alert status)
- New level definitions in first draft, mid week next week will
have completed.
note: new definitions to have 4 levels, vs. 3 currently.
-SCIS now includes a secure socket (SSL)

NIPC - Their reports are uncollaberated, yet considered credible.
- For official use only.
- Strikes against the US are considered "likely" this weekend.
- A flyover was reported at Columbia Energy, nuke plant in
Wisconsin.
- Symantic Co. reports their product"Live Update" version 1.4 is
vulnerable to exploits. A fix is forthcoming.

DOE - Level 2 continues (full alert)
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Also For your info's, here's some guidlines on NERC level 3:

For a NERC Alert 3, Full Alert Status, NERC recommends consideration of
such actions as:

Lock down of buildings.
Require badging.
Use surveillance as practical.
Implement rotating coverage of non-24x7 activities.
Staffing of key usually unstaffed facilities.
Start-up and/or staffing of back-up control centers
Consideration of blocking VPN and dial-up access except as may be
operationally required.
Review disaster recovery and restoration plans.
Establish backup communications.
Greater attention to intrusion detection system logs.
Curtailment of nonessential maintenance


Other actions may include:

selected maintenancecurtailment; selected additional generation reserves
in various states
of readiness; staffing of backup control facilities; examiniation of
connections of computers to outside communications including the
Internet and modems; maintainance of close coordination with First
Responders, local Law Enforcement, local FBI.
A more comprehensive suggestion list should be forthcoming from NERC next
week.

Hope this helps, EMSC