UCA International Users Group

SG Conformity Security Conformance High Level Requirements Task Group

UCA International User’s Group

OpenSG SG Conformity Working Group
Security Conformance Task Force
High Level Requirements Task Group

Scope Statement and Estimated Schedule

The High Level Requirements Task Group has been formed under the UCAIug OpenSG SG
Conformity Security Conformance Task Force. This document defines the scope of work for
this task group and estimated schedule of tasks.

OpenSG Conformance Task Force High Level Requirements Page 1 of 7

Security Conformity Working Group Scope Document v0.1
UCA International Users Group
SG Conformity Security Conformance High Level Requirements Task Group

1. Table of Contents

1. TABLE OF CONTENTS......................................................................................................................................2
2. CHANGE RECORD...........................................................................................................................................3
3. TASK GROUP DESCRIPTION........................................................................................................................4
A. SCOPE................................................................................................................................................................4
B. COMPLETION CRITERIA.....................................................................................................................................4
C. CONSTRAINTS....................................................................................................................................................4
D. DEPENDENCIES..................................................................................................................................................4
E. ASSUMPTIONS...................................................................................................................................................4
F. CRITICAL SUCCESS FACTORS............................................................................................................................4
G. ROLES AND STAKEHOLDERS.............................................................................................................................4
4. SCHEDULE ESTIMATES.................................................................................................................................6
A. ESTIMATED SCHEDULE......................................................................................................................................6
B. RESOURCE REQUIREMENTS – TEAM AND SUPPORT RESOURCES......................................................................6
5. CONTROLS........................................................................................................................................................7
A. TASK GROUP MEETINGS...................................................................................................................................7
B. STATUS REPORTS...............................................................................................................................................7
C. ISSUE MANAGEMENT........................................................................................................................................7
D. CHANGE MANAGEMENT...................................................................................................................................7
E. COMMUNICATION MANAGEMENT.....................................................................................................................7
6. Authorizations.......................................................................................................................................................9

OpenSG Conformance Task Force High Level Requirements Page 2 of 7

Security Conformity Working Group Scope Document v0.1
UCA International Users Group
SG Conformity Security Conformance High Level Requirements Task Group

2. Change Record

Date Author Version Change Reference

02/18/10 Jon Stitzel 0.1 Initial draft

OpenSG Conformance Task Force High Level Requirements Page 3 of 7

Security Conformity Working Group Scope Document v0.1
UCA International Users Group
SG Conformity Security Conformance High Level Requirements Task Group

3. Task Group Description

The High Level Requirements Task Group has been formed to ascertain the overall
requirements for cyber security conformity for Smart Grid devices.

a. Scope

The High Level Requirements Task Group shall be restricted to providing a specific list of
requirements for testing technical cyber security conformance with existing or developing
cyber security standards, in relation to OpenSG Smart Grid standards efforts.

Although the efforts of the High Level Requirements Task Group will be in cooperation with
other UCA Technical Committees, OpenSG Working Groups, and coordinated with the SG
Conformity Working Group and subsequent Task Forces; this Task Group will give no
influence to operational or interoperability standards, or standards being developed outside
the OpenSG umbrella.

b. Completion Criteria
This task group will consider security conformity requirements for the following aspects of
the Smart Grid, at a minimum:

 Operating Systems
 Windows
 Unix flavors
 Linux
 Security Mechanisms
 Authentication
 Authorization
 Audit and Logging
 Cryptographic Implementation and Configuration
 Error Handling
 Anti-Replay
 Anti-Malware
 Intrusion Detection


c. Constraints
This task group will operate under the auspices of the Security Conformance Task Force
and will comply with the scope and charter of that group.

d. Dependencies
This task group has no external dependencies at this time.

e. Roles and Stakeholders

Roles

OpenSG Conformance Task Force High Level Requirements Page 4 of 7

Security Conformity Working Group Scope Document v0.1
UCA International Users Group
SG Conformity Security Conformance High Level Requirements Task Group

The following role definitions are being applied to the volunteers assigned to this task group:

Provides guidance for task group activities, coordinates with

Chair
other task groups as appropriate, and communicates task
group activities to task force chair.

Team Member Works with Chair to accomplish the goals of the task group
within the stated scope.

Stakeholders

Name Role
Jon Stitzel Chair
Team Member

OpenSG Conformance Task Force High Level Requirements Page 5 of 7

Security Conformity Working Group Scope Document v0.1
UCA International Users Group
SG Conformity Security Conformance High Level Requirements Task Group

4. Schedule Estimates

a. Estimated Schedule

Key milestones relative to task group formation are as follows:

Task Group Milestones Target Date

Create Task Group 02/12/2010
Approval of Scope Document and Schedule 02/26/2010
First Draft of Requirements Document 03/19/2010
Comments Due for First Draft 03/26/2010
Second Draft of Requirements Document 04/09/2010
Comments Due for Second Draft 04/16/2010
Final Draft of Requirements Document 04/23/2010
Review and Approval by Conformance Task Force 04/30/2010

OpenSG Conformance Task Force High Level Requirements Page 6 of 7

Security Conformity Working Group Scope Document v0.1
UCA International Users Group
SG Conformity Security Conformance High Level Requirements Task Group

5. Controls
In order to facilitate the efficient and timely completion of this Task Group’s efforts, the
following functions shall be performed as stipulated.

a. Task Group Meetings

The High Level Requirements Task Group shall convene at least weekly for the duration of
the project, or until instructed to disband by the OpenSG Security Conformance Task Force
Chair. The Task Group chair shall preside over these weekly meetings, receive updates as
necessary from team members, and ensure all tasks are performed in a timely manner.

b. Status Reports
The Chair of the High Level Requirements Task Group shall provide status reports at least
weekly to the Chair of the OpenSG Security Conformance Task Force. These status reports
will include progress updates, scheduling changes, and estimated completion dates for
specific tasks.

c. Change Management
Modifications to the High Level Requirements Document shall be tracked to ensure accurate
version control. Comments on draft versions of the document should be posted on the
OpenSG Security Conformance website for response.

All officially released draft versions of the High Level Cyber Security Requirements
Document shall be annotated in said document and include the date of release, version
number, primary author, and a brief description of major changes from the previous version.

d. Communication Management
All formal and draft copies of working documents shall be made available on the OpenSG
SharePoint website for team comment.

OpenSG Conformance Task Force High Level Requirements Page 7 of 7

Security Conformity Working Group Scope Document v0.1