[OASIS Issue Tracker] Commented: (ENERGYINTEROP-287) 644: ISO'sneed to comply with NERC CIP, which should be clear in the example

[OASIS Issues Tracker <workgroup_mailer@lists.oasis-open.org>]

    [ http://tools.oasis-open.org/issues/browse/ENERGYINTEROP-287?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=24596#action_24596 ] 

William Cox commented on ENERGYINTEROP-287:
-------------------------------------------

The information structure correctly describes the information classification for NERC CIP, but including the "value" of the message in the message seems to increase risk by flagging more valuable messages. (From discussion with CSWG members)

This would be a useful "deployment descriptor", rather than a message component.

This seems to be relevant information in deciding what security/reliability to compose for specific types of interactions.

> 644:  ISO's need to comply with NERC CIP, which should be clear in the example
> ------------------------------------------------------------------------------
>
>                 Key: ENERGYINTEROP-287
>                 URL: http://tools.oasis-open.org/issues/browse/ENERGYINTEROP-287
>             Project: OASIS Energy Interoperation TC
>          Issue Type: Bug
>          Components: spec
>    Affects Versions: csd01 - Public Review Draft
>            Reporter: Edgardo Luzcando 
>            Assignee: William Cox
>            Priority: Critical
>             Fix For: wd19
>
>
> While line 640 mentiones security, privacy, and reliability the section speaks of security at the communication layer only.  ISO's need comply with NERC CIP Information Protection guidelines that should be described in the Information Model (see IRC Information Model and XML Schemas) to classify information, not only protect it.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://tools.oasis-open.org/issues/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira