Hurricanes pose a reoccurring threat to Texas' electric reliability and must be planned for well in advance to ensure sufficient mitigation. Having plans in place that staff are trained on and can execute with minimal downtime is vital for protecting assets and hastening recovery after a storm.

For hurricane information, including tips, best practices, and lessons learned, please refer to the below documents and links.

• 2020-05 Modifications to FAC-001 and FAC-002
• 2020-06 Verifications of Models and Data for Generators
• 2021-01 Modifications to MOD-025 and PRC-019
• 2021-02 Modifications to VAR-002
• 2021-04 Modifications to PRC-002
• 2021-07 Extreme Cold Weather Grid Operations, Preparedness, and Coordination
• 2022-02 Modifications to TPL-001-5.1 and MOD-032-1
• Project 2020-02 Modifications to PRC-024 (Generator Ride Through)

• Industry Recommendation: Loss of Solar Resources during Transmission Disturbance due to Inverter Settings
• Industry Recommendation: Loss of Solar Resources during Transmission Disturbances due to Inverter Settings - II
• Inverter-Based Resource Performance Issues
• Data Submission Worksheet - Inverter-Based Resource Performance Issues

• System Planning Impacts from Distributed Energy Resources Working Group (SPIDERWG)
• Inverter-Based Resource Performance Working Group (IRPWG)

The cybersecurity landscape continues to evolve rapidly, with ransomeware, social engineering attacks, and other malicious programs being deployed throughout North America each year in greater numbers. Maintaining a robust cybersecurity program is fundamental for entities to maintain Critical Infrastructure Protection in the modern threat environment. 

Below are a number of resources intended to assist entities in staying abreast of cybersecurity issues and reporting events as they occur. 

• CISA Incident Reporting System (CISA)

• Insider Risk Self-Assessment Tool (CISA)

• Zero Trust Maturity Model (CISA)

• Emergency Directive 21-01: Mitigate SolarWinds Orion Code Compromise (CISA)

• Apache Log4j Vulnerability Guidance (CISA)

• Known Exploited Vulnerabilities Catalog (CISA)

• Electric Disturbance Events (DOE-417) Form (DOE)

• Cybersecurity for the Operation Technology Environment (CyOTE) Methodology (DOE)

• (C2M2) Cybersecurity Capability Maturity Model (DOE)

• Zero Trust Reference Architecture (DOD)

• Documents & Templates (FedRAMP)

• Texas Cybersecurity Monitor Program Application and Agreement for 2022 (PUCT)

• Surface Transportation Cybersecurity Toolkit (TSA)

• Cybersecurity Considerations for Distributed Energy Resources on the U.S. Electric Grid (DOE)

• Mapping of CIP Standards to NIST Cybersecurity Framework (CSF) v1.1 (NERC)

• Section 23 Form O: Notice of Cybersecurity Incident (ERCOT)

• Bulletins and Documents (E-ISAC)

• Computer Security Incident Handling Guide: NIST Special Publication 800-61 Rev 2 (NIST)

• Zero Trust Architecture: NIST Special Publication 800-207 (NIST)

• The NIST Definition of Cloud Computing: NIST Special Publication 800-145 (NIST)

• Guide to Security for Full Virtualization Technologies: NIST Special Publication
  800-125 (NIST)

• Supply Chain Risk Management Practices for Federal Information Systems and Organizations: NIST Special Publication 800-161 (NIST)

• Security and Privacy Controls for Information Systems and Organizations: NIST Special Publication 800-53 Rev. 5 (NIST)

• MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) Matrices (MITRE)

• CIS Critical Security Controls (CIS)

• Digital Identity Guidelines (NIST)

• Security Integration Strategy (NERC)

• CIP Themes and Lessons Learned