WIXLIB

SOUTHWEST POWER POOL, INC.SECURITY ADVISORY GROUP MEETINGMarch 9, 2021 9:00am to 12:00pmTeleconferenceMINUTESORGANIZATIONAL ROSTERThe following persons are members of the Security Working Group:Aron Peetz *Omaha Public Power DistrictAmanda Gray *Grand River Dam AuthorityBret Hammer *Xcel EnergyChad Wasinger *Sunflower ElectricDaniel Moore *Western Farmer’s Electric CoopDavid TrojanITCIan Anderson (vice chair) *Oklahoma Gas & ElectricJacob McClanahan *City Utilities of SpringfieldJodi Jensen *Western Area Power Admin.Michael Goad (staff secretary) *Southwest Power PoolNita Dickerson *NE Texas Electric Coop.Paul Schmiege *EvergyPhil Clark (chair) *Arkansas Electric Cooperative CorporationRon Bender *Nebraska Public Power DistrictShawn Eck *Empire District ElectricSteve Arnold *Independence Power & LightTed Bowen *AEP/PSO* Indicates attendance Indicates representation by proxyACTIVITY UPDATEThe Security Advisory Group (SECAG) conducted its regular quarterly meeting on March 9, 2021hosted via WebEx. There were 51 teleconference participants.

SPP SECAG March 9, 2021UPCOMING MEETINGSFuture meetings of the SPP SECWG have been scheduled for:Q2 June 15, 2021Virtual - WebExQ3 September 14, 2021TBDQ4 December 14, 2021TBDAGENDA ITEMSPhil Clark (AECC) called the 2021 Q1 SPP Security Advisory Group (SECAG) meeting to order at9:05 am CST and welcomed all attendees.Mr. Clark welcomed new SECAG Member, Paul Schmiege (Evergy). Mr. Clark thanked Eric Ervin(Evergy) for his 10 years of service as a SECAG Member and former chair.Michael Goad (SPP) reviewed the Antitrust Reminder and conducted roll call of SECAG Membersand Receipt of Proxies. (Attachment – SECAG Members-Proxies)Mr. Goad updated the group on the MOPC reorg process. Notable item is changing group nameSecurity Working Group to Security Advisory Group.Mr. Clark reviewed the proposed agenda with the group and made minor changes. Agenda wasapproved. There were no abstentions or opposition. (Attachment – Agenda)The minutes from the 2020 Q4 SECAG meeting were reviewed and approved with no edits.Meeting minutes were approved. There were no abstentions or opposition. (Attachment –Meeting Minutes)Mr. Clark motioned to move the June and September meetings up one week. The motion wasapproved. There were no abstentions or opposition.Mr. Clark motioned to hold closed Executive session next quarter due to sensitivity ofinformation discussed, to include cyber and physical security vulnerabilities, threats, protection,and tactics of SPP and SPP Members. The motion was approved. There were no abstentions oropposition.

SPP SECAG March 9, 2021SECAG Members voted to hold closed Executive session this quarter due to sensitivity ofinformation discussed.Information below was approved to share in Meeting Minutes:U.S. Cert CISA: Remediating Microsoft Exchange ng-microsoft-exchange-vulnerabilitiesMRO SAC Roundtable on ICS System Remote Access Practices spForm New.aspx?ID 503&Source EaspxFederal Virtual Training Environment (FedVTE) provides free online cybersecuritytraining to federal, state, local, tribal, and territorial government employees,federal contractors, and US military veterans:https://fedvte.usalearning.gov/NICCS CISA Cyber Career Pathways Tool - Good resource when evaluatingcybersecurity lopment/cyber-career-pathwaysNICCS CISA Cyber Career Pathways Tool - Veterans: Launch a New g/veteransMr. Clark adjourned the meeting at 11:28 am.Respectfully submitted,Michael P. Goad, SECAG staff secretary

SPP SECAG Members-ProxiesMeeting Date: March 9, berMemberMemberVice ChairMemberMemberStaff erMemberMemberMemberOmaha Public Power DistrictGrand River Dam AuthorityXcel EnergySunflower Electric Power CorporationWestern Farmers Electric CooperativePROXYATTENDXXXXXITCOklahoma Gas and ElectricCity Utilities of SpringfieldWestern Area Power Admin.Southwest Power PoolGoff & Herrington PC representing NETexas Electric Coop.EvergyArkansas Electric CooperativeCorporationNebraska Public Power DistrictEmpire District ElectricIndependence Power & LightAEP/PSOXXXXXXXXXXX

SOUTHWEST POWER POOL, INC.SECURITY ADVISORY GROUP MEETINGMarch 9, 2021 9:00am to 12:00pmTeleconferenceAGENDAADMINISTRATIVE ITEMS1. Call to Order and Welcome . . . Phil Clark, AECC (15 min) Antitrust Reminder & Notice of Observers - Michael Goad, SPP Receipt of Proxies - Michael Goad, SPP Review of Past Action Items - Michael Goad, SPP2. Welcome New SPP SECAG Members . . . . Phil Clark, AECC (2 min)3. MOPC Reorg update . . Michael Goad, SPP (2 min)4. Review of Agenda (Approval Item) . . . Phil Clark, AECC (2 min)5. Review 2020 Q4 Minute Meetings (Approval Item) . . . . . Phil Clark, AECC (2 min)AGENDA ITEMS6. DOE Supply Chain Framework Presentation . . . Kurt Merkling, U.S. DOE (45 min)U.S. DOE framework for Supply Chain/Risk Management7. CIP-013 Supply Chain Group Discussion . . All (15 min)Break . . . . . . All (10 min)8. OGE New Training Tool Presentation . . . . Ian Anderson, OGE (45 min)Working from Home technology/tools, practices, & synergy9. SolarWinds-Sunburst Wrap-Up Group Discussion . . . . . All (10 min)Continue SolarWinds discussion – when is it “completed”10. MRO Audit Experience/Updates . . . . All (10 min)11. Additional Topics & Round Table Discussions . . . All Question to group follow-up: Does anyone know anyone with a CPP or PSP certification thatworks with and/or is familiar with the electrical industry? – Amanda Gray, GRDA Enterprise Monitoring Efficiency Recommendations on Technical Training for staffSUMMARY OF ACTION ITEMS & FUTURE MEETINGS13. Action Items . . . . . . . . . Michael Goad, SPP (2 min)14 Future Meetings and adjournment . Phil Clark, AECC (2 min)Q2 June 22, 2021Q3 September 21, 2021Q4 December 14, 2021Virtual WebExTBDTBDAntitrust: SPP strictly prohibits use of participation in SPP activities as a forum for engaging in practices or communications thatviolate the antitrust laws. Please avoid discussion of topics or behavior that would result in anti-competitive behavior, including but notlimited to, agreements between or among competitors regarding prices, bid and offer practices, availability of service, product design,terms of sale, division of markets, allocation of customers or any other activity that might unreasonably restrain competition.

SOUTHWEST POWER POOL, INC.SECURITY WORKING GROUP MEETINGDecember 15, 2020 9:00am to 11:00amTeleconferenceMINUTESORGANIZATIONAL ROSTERThe following persons are members of the Security Working Group:Aron Peetz Omaha Public Power DistrictAmanda Gray *Grand River Dam AuthorityBret HammerXcel EnergyChad Wasinger (vice chair) *Sunflower ElectricDaniel Moore *Western Farmer’s Electric CoopDavid Trojan *ITCEric Ervin EvergyIan Anderson *Oklahoma Gas & ElectricJacob McClanahan *City Utilities of SpringfieldJodi Jensen *Western Area Power Admin.Michael Goad (staff secretary) *Southwest Power PoolNita DickersonNE Texas Electric Coop.Phil Clark (chair) *Arkansas Electric Cooperative CorporationRon Bender *Nebraska Public Power DistrictShawn Eck *Empire District ElectricSteve Arnold *Independence Power & LightTed BowenAEP/PSO* Indicates attendance Indicates representation by proxyACTIVITY UPDATEThe Security Working Group (SECWG) conducted its regular quarterly meeting on December 15,2020 hosted via WebEx. There were 47 teleconference participants.

SPP SECWG December 15, 2020UPCOMING MEETINGSFuture meetings of the SPP SECWG have been scheduled for:Q1 March 9, 2021Virtual - WebExQ2 June 22, 2021TBDQ3 September 21, 2021TBDQ4 December 14, 2021TBDAGENDA ITEMSPhil Clark (AECC) called the 2020 Q4 SPP Security Working Group (SECWG) meeting to order at9:05 am CST and welcomed all attendees.Mr. Clark welcomed new SECWG Member, Bret Hammer (Xcel Engery) and Aron Peetz (OPPD).Mr. Clark thanked Mike Fitzpatrick (OPPD) for his years of service as a SECWG Member.Michael Goad (SPP) reviewed the Antitrust Reminder and conducted roll call of SECWGMembers and Receipt of Proxies. (Attachment – SECWG Members-Proxies)Mr. Clark reviewed the proposed agenda with the group and made minor changes. DanielMoore (WFEC) motioned to approve the agenda and Ian Anderson (OGE) seconded. There wereno abstentions or opposition. (Attachment – Agenda)The minutes from the 2020 Q3 SECWG meeting were reviewed and approved with no edits. RonBender (NPPD) motioned to approve the minutes and Ian Anderson (OGE) seconded. There wereno abstentions or opposition. (Attachment – Meeting Minutes)Mr. Goad updated the group on the MOPC reorg process. Items still on track to be approvedmid-January. Notable item is changing group name to Security Advisory Group.Chad Wasinger (Sunflower) nominated Ian Anderson (OGE) for SECWG vice chair for termstarting January 1, 2021 to December 31, 2022. Mr. Anderson was unanimously approved. Therewere no abstentions or opposition.

SPP SECWG December 15, 2020SECWG Members voted to hold closed Executive session this quarter in lieu of face-to-face opensession due to COVID-19 recommendations.Information below was approved to share in Meeting Minutes:Two Agricultural Scientists from China Charged with Stealing Trade ican Superconductor Accuses Chinese Firm - Its Biggest Customer - of 53111903374004576578971052370768NATF Webinar - Suppliers: Responding to Requests for Cyber Security 12012020.pdfE-ISAC Post #128517: Reporting Mechanisms for CIP-008-6: https://www.eisac.com/portalhome/news-detail?id 128517To report to DHS CISA: CISA Incident Reporting: A copy of this report may also be sent to the E-ISAC to reduceduplication of efforts. Call 888-282-0870 Email soc@us-cert.gov or cisaservicedesk@cisa.dhs.govGridEx VI Registration for Lead Planners: https://register4gridex.eisac.com/Cybersecurity and Infrastructure Security Agency’s Emergency Directive 21-01:https://cyber.dhs.gov/ed/21-01/SANS December 14, 2020 Sunburst Presentation r NULL&v qP3LQNsjKWwDark Halo Leverages SolarWinds Compromise to Breach reach-organizations/COVID-19 Informational video: https://www.youtube.com/watch?v HtSXyGM0n-U

SPP SECWG December 15, 2020Executive SessionA lengthy “pens down” roundtable discussion was conducted. This is an opportunity formeeting attendees to bring up any comments, experiences, or other topics for discussion withan expectation that the discussion will not leave the room.The Executive session was adjourned at 10:50 am.Respectfully submitted,Michael P. Goad, SECWG Staff Secretary

SPP SECWG Members-ProxiesMeeting Date: December 15, Vice ChairMemberMemberMemberMemberMemberMemberStaff erMEMBERPROXYOmaha Public Power DistrictMike FitzpatrickGrand River Dam AuthorityATTENDANCEXXXcel EnergySunflower Electric Power CorporationWestern Farmers Electric CooperativeITCEvergyOklahoma Gas and ElectricCity Utilities of SpringfieldWestern Area Power Admin.Southwest Power PoolGoff & Herrington PC representing NETexas Electric Coop.Arkansas Electric CooperativeCorporationNebraska Public Power DistrictEmpire District ElectricIndependence Power & LightAEP/PSOPaul SchmiegeXXXXXXXXXXXX