WECC · Ruchi Shah Reliability and Security Workshop AGENDA OPERATIONS AND PLANNING TRACK. Reliability and Security Workshop Biographies WECC Staff Presenters Cathy Bakk Joe Baugh

R

eli

ab

ilit

y a

nd

Se

cu

rity

Wo

rks

ho

p

Reliability and Security Workshop

October 23-25, 2018San Diego, CA

WECC

Re

lia

bil

ity

an

d S

ec

uri

ty W

ork

sh

op

Biographies

WECC Staff Presenters

Cathy Bakk

Joe Baugh

Scott Brooksby

Deveny Bywaters

Merrill Brimhall

Greg Coventry

Michael Dalebout

Dave Godfrey

John Graminski

Debra Horvath

Gary King

Morgan King

Phil O’Donnell

Harold Sherrill

Dan Wagner

Mike Wells

Eric Weston

Tyler Whiting

Tom Williams

Ruchi Shah

Re

lia

bil

ity

an

d S

ec

uri

ty W

ork

sh

op

Click for video

https://youtu.be/vlwQ1O9kgRY

Re

lia

bil

ity

an

d S

ec

uri

ty W

ork

sh

op

Biographies


Cathy Bakk

Joe Baugh

Scott Brooksby

Deveny Bywaters

Merrill Brimhall

Greg Coventry

Michael Dalebout

Dave Godfrey

John Graminski

Debra Horvath

Gary King

Morgan King

Phil O’Donnell

Harold Sherrill

Dan Wagner

Mike Wells

Eric Weston

Tyler Whiting

Tom Williams

Ruchi Shah

Re

lia

bil

ity

an

d S

ec

uri

ty W

ork

sh

op

AGENDA

General Session and Keynotes

Re

lia

bil

ity

an

d S

ec

uri

ty W

ork

sh

op

Biographies


Cathy Bakk

Joe Baugh

Scott Brooksby

Deveny Bywaters

Merrill Brimhall

Greg Coventry

Michael Dalebout

Dave Godfrey

John Graminski

Debra Horvath

Gary King

Morgan King

Phil O’Donnell

Harold Sherrill

Dan Wagner

Mike Wells

Eric Weston

Tyler Whiting

Tom Williams

Ruchi Shah

Re

lia

bil

ity

an

d S

ec

uri

ty W

ork

sh

op

AGENDA

CYBERSECURITY TRACK

Re

lia

bil

ity

an

d S

ec

uri

ty W

ork

sh

op

Biographies


Cathy Bakk

Joe Baugh

Scott Brooksby

Deveny Bywaters

Merrill Brimhall

Greg Coventry

Michael Dalebout

Dave Godfrey

John Graminski

Debra Horvath

Gary King

Morgan King

Phil O’Donnell

Harold Sherrill

Dan Wagner

Mike Wells

Eric Weston

Tyler Whiting

Tom Williams

Ruchi Shah

Re

lia

bil

ity

an

d S

ec

uri

ty W

ork

sh

op

AGENDA

PHYSICALSECURITYTRACK

Re

lia

bil

ity

an

d S

ec

uri

ty W

ork

sh

op

Biographies


Cathy Bakk

Joe Baugh

Scott Brooksby

Deveny Bywaters

Merrill Brimhall

Greg Coventry

Michael Dalebout

Dave Godfrey

John Graminski

Debra Horvath

Gary King

Morgan King

Phil O’Donnell

Harold Sherrill

Dan Wagner

Mike Wells

Eric Weston

Tyler Whiting

Tom Williams

Ruchi Shah

Re

lia

bil

ity

an

d S

ec

uri

ty W

ork

sh

op

AGENDA

OPERATIONS ANDPLANNINGTRACK

Re

lia

bil

ity

an

d S

ec

uri

ty W

ork

sh

op

Biographies


Cathy Bakk

Joe Baugh

Scott Brooksby

Deveny Bywaters

Merrill Brimhall

Greg Coventry

Michael Dalebout

Dave Godfrey

John Graminski

Debra Horvath

Gary King

Morgan King

Phil O’Donnell

Harold Sherrill

Dan Wagner

Mike Wells

Eric Weston

Tyler Whiting

Tom Williams

Ruchi Shah

Re

lia

bil

ity

an

d S

ec

uri

ty W

ork

sh

op

AGENDA

ENTITYOVERSIGHTTRACK

Re

lia

bil

ity

an

d S

ec

uri

ty W

ork

sh

op

Biographies


Cathy Bakk

Joe Baugh

Scott Brooksby

Deveny Bywaters

Merrill Brimhall

Greg Coventry

Michael Dalebout

Dave Godfrey

John Graminski

Debra Horvath

Gary King

Morgan King

Phil O’Donnell

Harold Sherrill

Dan Wagner

Mike Wells

Eric Weston

Tyler Whiting

Tom Williams

Ruchi Shah

Re

lia

bil

ity

an

d S

ec

uri

ty W

ork

sh

op

AGENDA

WECC WISELightning RoundsGeneral Session

Re

lia

bil

ity

an

d S

ec

uri

ty W

ork

sh

op

Biographies

KEYNOTE SPEAKER: Commissioner Carla Peterman, CPUC

FINANCE INDUSTRY KEYNOTE: Kevin Hickey, Signature Bank

CYBERSECURITY GUEST SPEAKER:Brent Sessions, WAPA

PHYSICAL SECURITY PANEL:

Allan Mangold, Protective Technologies Group

James Murphy, Senior Director of Corporate Security, PG&E

Will Sauntry, Sempra Energy

Craig Summers, Western Regional Manager, AMICO Security Products

Christopher Vicino, Director of Security Services, LADWP

OPERATIONS AND PLANNING PANEL:

Sophia Combs, Salt River Project

Lauri Jones, Pacific Gas & Electric

Josiah Pruiksma, San Diego Gas and Electric

ENTITY OVERSIGHT PANEL:

Joe Carluccio, BPA

Tina Kilgore-Goodwill, CAISO

Lisa Milanes, CAISO

Eric Olsen, SMUD

Carla Peterman

Commissioner

California Public Utilites Commission

Carla J. Peterman is a Commissioner at the California Public Utilities Commission (CPUC). She was appointed by Governor Edmund G. Brown Jr. in December 2012. Commissioner Peterman is the assigned Commissioner to a number of energy, communications, and water proceedings including energy efficiency, alternative transportation, energy storage, and PCIA reform.

The Commissioner’s key interest areas include decarbonization policy, energy markets, and technology adoption. She has led several CPUC clean-energy initiatives including the adoption of the nation’s first utility energy storage mandate, the first framework for energy storage multi-use applications, approval of $965 million of utility investments in electric vehicle charging infrastructure, adoption of utility energy efficiency goals and business plans, and the implementation of California’s Renewables Portfolio Standard (RPS). Commissioner Peterman has also been the assigned Commissioner for rate cases for Pacific Gas and Electric Company, Southern California Edison, California-American Water Company, and San Jose Water Company.

She has received several recognitions for her public service, including KJLH Proven Achievers Award (2018), C3E Government Award (2015), Clean Energy Storage Alliance’s 2015 Policy Champion award; Coalition for Clean Air’s 2014 Clean Air Champion award, and the California Legislative Black Caucus’ Horizon Award (2013). Born and raised in Newark and South Orange, New Jersey, Commissioner Peterman holds a Doctor of Philosophy in Energy and Resources from the University of California, Berkeley. She also earned a Master of Science degree and a Master of Business Administration degree from Oxford University, where she was a Rhodes Scholar. Commissioner Peterman holds a Bachelor of Arts in History from Howard University, where she graduated summa cum laude.

Re

lia

bil

ity

an

d S

ec

uri

ty W

ork

sh

op

Biographies















Joe Carluccio, BPA


Lisa Milanes, CAISO

Eric Olsen, SMUD

Kevin Hickey

Chief Risk Officer and Vice President

Signature Bank

Kevin T. Hickey serves as Chief Risk Officer and Senior Vice President at Signature Bank, a New York-based full-service commercial bank with 30 private client offices throughout the metropolitan N.Y. area as well as a location in San Francisco. In his role as Chief Risk Officer, which he has held since March 2016, Hickey leads the Bank’s Risk Management Group, overseeing compliance, credit risk/loan review, market & liquidity risk, operational risk, vendor risk, business continuity, model risk, information security, Sarbanes Oxley compliance and insurance program.

Hickey joined Signature Bank in November 2004 as Associate Treasurer and assumed the additional title of Senior Vice President eight years later. He served in this capacity for four years before being promoted to his current role. In the Associate Treasurer role, Hickey was responsible for managing the Bank’s investment portfolio, interest rate risk, liquidity and interest rate derivatives. During his tenure at Signature Bank, Hickey has served on a range of internal corporate governance committees, including, among others, the Board Risk Committee, the Compliance Committee and the Asset & Liability Committee.

Hickey has spent more than 20 years in the financial services arena, particularly within risk management. Prior to joining Signature Bank, he was Treasury Officer and Analyst/Trader at M&T Bank in New York, where he was directly responsible for researching, recommending and transacting in various Fixed Income investments for its portfolio.

A graduate of the University of Harford (Hartford, Conn.) where he earned a Bachelor of Science degree in Business Administration, Hickey also received a Master’s degree in Business Administration from Fordham University in New York. He is a Chartered Financial Analyst. Hickey taught Signature Bank’s First Time Investors Program for 11 years. The First Time Investors Program is a curriculum offered quarterly by Signature Bank, designed to educate low-income New York City residents about investing and finance. Hickey resides in Wilton, Connecticut.

Re

lia

bil

ity

an

d S

ec

uri

ty W

ork

sh

op

Biographies















Joe Carluccio, BPA


Lisa Milanes, CAISO

Eric Olsen, SMUD

PHYSICAL SECURITY PANEL

Allan Mangold, Protective Technologies GroupMr. Mangold has 20-plus years in the multi-hazards and all-hazards industry. Throughout his years in the industry he has been heavily involved in research and development, testing, and commercialization; working closely with the University of California School of Engineering, Army Corps of Engineering Protective Design Center, Naval Facilities Expeditionary Warfare Center and the Department of Homeland Security Science and Technology Directorate as well as live blast and ballistic testing programs. Mr. Mangold’s business development efforts on behalf of his company have created opportunities for him to direct all phases of design, engineering, and construction for projects and programs in the anti-terrorism/force protection, multi-hazards, and all-hazards environments. He is conversant in a wide variety of government standards as well as commercial, military, petrochemical and school campus construction, making him a valuable bridge between the technology and real-world applications.

James Murphy, Senior Director of Corporate Security, PG&E James (Jim) Murphy is Senior Director of Corporate Security for Pacific Gas and Electric (PG&E) and is a member of the PG&E Corporate Security team. Jim brings a business focus to the department and leads a team of talented business and security professionals whose mission is to protect PG&E’s people, information, business, and assets. He began his career as a Special Agent with the FBI, concentrating in the areas of White Collar Crime and Public Corruption. Jim then moved into the private sector and held security management positions with the Motion Picture Association, Merck Pharmaceuticals, Scholastic, Lexmark International, and most recently Kimberly-Clark. Jim is headquartered in San Francisco. He holds a Bachelors degree in Accounting from the University of Scranton, and a J.D. from Delaware Law School.

Will Sauntry, Corporate Security Risk, Intelligence and Compliance Manager, Sempra Energy Will Sauntry currently serves as the Corporate Security Risk, Intelligence, and Compliance Manager for Sempra Energy, which owns electric and natural gas utilities and infrastructure within the United States, Mexico, Peru, and Chile. Mr. Sauntry’s current responsibilities include developing the Risk Management, Intelligence, and Compliance Programs to identify, assess, control, and monitor physical security risks; ensure regulatory compliance regarding risk management; and to act as a liaison to the intelligence community. Prior to working from Sempra Energy, Mr. Sauntry spent eight years within the San Diego Law Enforcement Coordination Center as the supervisor for the Cyber Intelligence, Geospatial Intelligence, and Critical Infrastructure Protection Units. He is the Co-Founder and Steering Committee Member of the Energy Sector Analyst Roundtable, a national working group of energy sector intelligence analysts focused on sharing threat information and security best practices.

No Photo Available

Re

lia

bil

ity

an

d S

ec

uri

ty W

ork

sh

op

Biographies















Joe Carluccio, BPA


Lisa Milanes, CAISO

Eric Olsen, SMUD

PHYSICAL SECURITY PANEL - continued

Craig Summers, Western Regional Manager, AMICO Security Products Craig Summers is currently the Western Regional Manager for AMICO Security Products. For the last 15 years, Craig has been in the perimeter security industry developing and providing Anti-Terrorism Force Protection solutions for projects such as Canada’s Parliament Hill and Canadian Security Intelligence Service. With an extensive background in coatings, Craig spent eight years in the galvanizing industry. During this tenure, Craig was a participating member of the American Galvanizers Association, as well as the Chairman of the Texas Structural Steel Institute.

Christopher O. Vicino, Director of Security Services and Emergency Management, LADWP Christopher Vicino is responsible for managing LADWP’s security operations, emergency management, special investigations, and security planning, overseeing approximately 300 employees. He also directs the development and implementation of comprehensive security and emergency management programs partners with intelligence and law enforcement agencies at the Federal, State, and local levels to identify and assess risks and potential threats, shares intelligence information, and implements programs and controls to protect LADWP’s infrastructure. Mr. Vicino has 32-years of law enforcement experience, serving 6-years with the Riverside Police Department as the Assistant Chief of Police and 26-years with the Pasadena Police Department, working at each rank and eventually being named the Chief of Police from 2008-2010. He holds a BA in Economics and Political Science from Claremont Men’s College and a Master of Arts Degree in Security Studies, graduating with honors.

Re

lia

bil

ity

an

d S

ec

uri

ty W

ork

sh

op

Biographies















Joe Carluccio, BPA


Lisa Milanes, CAISO

Eric Olsen, SMUD

OPERATIONS AND PLANNING PANEL

Sophia Combs, System Operations Training, Salt River ProjectSophia Combs is a spirited and respected professional who brings over 20 years of experience to her work. Her colleagues have affectionately nicknamed her “action” as she thrives on tight deadlines. Sophia’s career in the utility industry has been diverse, and she has held various roles in Human Resources, Supply and Trading, Organizational Change Management, CIP Compliance, and is presently in System Operations Training.

Lauri Jones, Senior Supervisor of Transmission System Operations, Pacific Gas and ElectricLauri Jones is the Senior Supervisor of the Transmission System Operations - training team for Pacific Gas and Electric Company (PG&E), providing training to their System Dispatchers, Transmission System Operators, and Apprentice Transmission System Operators through their NERC Continuing Education Provider program. She has over 30 years with PG&E and is past chair or vice chair of numerous industry activities and committees including the WECC Operations Training Subcommittee, NERC Personnel Subcommittee, the North American Transmission Forum Operator Training Group, the California Electric Training Advisory Committee (CETAC), and NERC Standard Drafting teams for PER-003 and PER-005. Throughout her career, she has been qualified as a journeyman lineman, journeyman transmission system operator, system dispatcher, and an operating supervisor in PG&E’s Transmission Operations Center. She has a BS degree in Education from Arizona State University.

Josiah Pruiksma, System Operator, San Diego Gas and Electric Josiah Pruiksma began his career as a Substation Operator at Southern California Edison before moving on to become a System Operator. After eight years at S.C.E. he and his family moved to North Carolina to work for Duke Energy as a Transmission Coordinator until an opportunity to become a Technical Trainer presented itself. After almost four very rewarding and challenging years as a Technical Trainer at Duke Energy, Josiah and his family made the move back home to Southern California. Josiah is excited to be a System Operator Trainer at San Diego Gas and Electric and he can’t wait to gain training knowledge and experience. Currently, Josiah is interested in Human Performance and how to incorporate more HP tools into control rooms.

Re

lia

bil

ity

an

d S

ec

uri

ty W

ork

sh

op

Biographies















Joe Carluccio, BPA


Lisa Milanes, CAISO

Eric Olsen, SMUD

INTERNAL CONTROLS PANEL

Joe Carluccio, Transmission Internal Operations Lead for NERC Reliability Standards Joe Carluccio oversees staff responsible for managing BPA’s participation in NERC and WECC Standard development and implementation activities. Further, Joe has been leading a key BPA strategic effort to establish transmission-wide program management practices for internal controls that adhere with NERC and WECC risk-based compliance models. Mr. Carluccio has been employed by BPA for nine years. He holds a Master’s Degree in Public Administration and is a certified Project Management Professional.

Tina Kilgore-Goodwin, Director of Internal Audit, California Independent System Operator (ISO) Tina Kilgore-Goodwin is responsible for overseeing the day-to-day operations and activities of the internal audit function, as outlined in the ISO Internal Audit Charter. Tina and her team are responsible for planning and conducting various ISO operational, IT, and financial process audits, as identified in its annual risk-based audit plan, to add value, improve operations and strengthen ISO’s compliance posture. Tina is also responsible for facilitating the ISO enterprise risk management program and partnering with Compliance and Corporate Affairs in developing and implementing an internal controls framework to support NERC reliability standards and tariff compliance. She holds a BS in Business Administration, with an Accounting concentration, from the University of the Pacific and holds the following certifications: Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA), Certified Public Accountant (CPA) and Certification in Risk Management Assurance (CRMA).

Lisa Milanes, Director of Compliance and Corporate Affairs, California Independent System Operator (ISO) Lisa Milanes is responsible for overseeing the day-to-day operation of the ISO’s internal compliance program, working closely with the executive team and Chief Compliance Officer and directing the activities of the ISO’s compliance staff and other ISO personnel responsible for the compliance function. The areas of compliance that fall within her responsibilities include mandatory reliability standards, ISO tariff, general laws, regulations, policies and procedures. She is also responsible for the development and implementation of the ISO internal controls framework to support NERC reliability standards. Lisa represents the ISO as the WECC and Peak Reliability (Peak RC) Class 1 member representative. She holds a Bachelor of Science degree in Computer Information Systems from Saint Leo University and a Master’s degree in Legal Studies from The Colleges of Law in Santa Barbara.

Eric Olsen, Internal Controls Manager, Sacramento Municipal Utility District (SMUD) Eric Olson is the Internal Controls Program Manager within SMUD’s Reliability Compliance and Coordination department. Eric is responsible for managing SMUD’s Internal Controls Evaluation Program, working with colleagues in the compliance department and across the operational business units to identify and evaluate SMUD’s internal controls related to reliability compliance. He also participates in a wide range of risk assessment and compliance oversight of activities related to SMUD’s reliability standards obligations. Prior to joining SMUD in 2017, Eric worked at Navigant as a consultant to the energy industry for 14 years. While with Navigant, Eric developed internal compliance programs, participated in reliability standards development activities, and conducted reviews of registered entities’ compliance evidence.

No photo available

Re

lia

bil

ity

an

d S

ec

uri

ty W

ork

sh

op

Biographies


Cathy Bakk

Joe Baugh

Scott Brooksby

Deveny Bywaters

Merrill Brimhall

Greg Coventry

Michael Dalebout

Dave Godfrey

John Graminski

Debra Horvath

Gary King

Morgan King

Phil O’Donnell

Harold Sherrill

Dan Wagner

Mike Wells

Eric Weston

Tyler Whiting

Tom Williams

Ruchi Shah

WECC STAFF PRESENTERS

Cathy Bakk, Compliance Auditor, Operations and Planning Cathy Bakk joined WECC in March of 2009. Cathy was the Supervisor to the Compliance Program Coordinators for over two years and then joined the Operations and Planning Audit Team in 2014. She brings over 15 years of experience from the aviation operations and security industry, having worked for Delta Air Lines and the Department of Homeland of Security.

Dr. Joseph (Joe) Baugh, Senior Compliance Auditor, Cyber Security Dr. Joseph Baugh has worked in the electrical utility industry since 1973. Starting his career as an apprentice lineman on transmission construction projects nationwide, he continued to work as a lineman performing hot-stick and barehand live-line transmission maintenance until 1990. He then moved into the System Control Center at Arizona Electric Power Cooperative as a Power System Controller for eight years and then held various technical and managerial roles related to information technology infrastructure, security, and project management. Returning to Power Operations as the Power Trading Services Manager in 2008, he served on the WECC-ISAS subcommittee and worked closely with entities throughout WECC on scheduling and interchange issues. Dr. Baugh joined WECC as a full-time employee on the Critical Infrastructure Protection (CIP) Audit and Investigations Team in 2011 after retiring from Arizona Electric Power.

Scott Brooksby, Senior Cyber Security Engineer Scott joined WECC in October 2017 as part of the Risk Assessment and Mitigation team. Scott has over 20 years of experience in Technology for the Finance Sector, with over 15 years dedicated to Cyber Security, most recently as a Chief Information and Physical Security Officer at American Express, and a Local Security Officer at GE Capital Financial.

Deveny Bywaters, Training Manager Deveny Bywaters is the Training Manager for WECC and is responsible for the Outreach Training Program and is the staff liaison for the Human Performance Work Group (HPWG). With 29 years of experience in training and talent development, Deveny finds human performance a fascinating element of training. What does it take to motivate a learner? What is the best way to facilitate knowledge transfer? How are hidden biases affecting performance? These are the kinds of questions that keep a trainer on their toes!

Re

lia

bil

ity

an

d S

ec

uri

ty W

ork

sh

op

Biographies


Cathy Bakk

Joe Baugh

Scott Brooksby

Deveny Bywaters

Merrill Brimhall

Greg Coventry

Michael Dalebout

Dave Godfrey

John Graminski

Debra Horvath

Gary King

Morgan King

Phil O’Donnell

Harold Sherrill

Dan Wagner

Mike Wells

Eric Weston

Tyler Whiting

Tom Williams

Ruchi Shah


Merrill Brimhall, Manager of Knowledge Transfer Merrill Brimhall currently serves as WECC’s Manager of Knowledge Transfer. He is an Electrical Engineer with forty years of experience in the Electric Utility Industry. During his career, he has been involved in the construction of electric utility generation including development, electrical design, and project management; securing of transmission interconnection agreements for generation facilities; managing development and publication of engineering standards; engineering, economic analysis, and transmission system design and planning; and development of Reliability Standards.

Greg Coventry, Compliance Auditor, Operations and Planning Greg Coventry joined WECC as a Compliance Auditor, O&P in April 2014. Prior to joining WECC, he worked at First Solar as lead of the compliance department. In this capacity, Greg developed and implemented the NERC/WECC Compliance Program and began development of compliance training for the First Solar Operations and Maintenance Department. Prior to First Solar, Greg worked for the Midcontinent Independent System Operator (MISO) as a Senior Customer Trainer, where he developed and implemented a customer-oriented training program focused on inter-operational relationships between MISO and member organizations, including training of operations teams for new organization integration into the MISO footprint.

Michael Dalebout, Manager of Registration Michael Dalebout is WECC’s Registration Manager. Michael arrived at WECC in 2009 as a Senior Enforcement Analyst with 15 years of utility experience at US WEST Communications. During this time, Michael was responsible for regulatory relations, tariff management, service level agreements, and policy advocacy for digital services. As the Registration Manager, Michael is responsible for ensuring that WECC has met its obligation to identify and register all entities that meet the criteria for inclusion in the Compliance Registry, and to ensure that the registration criteria continues to be related to risks to reliability. Michael is also WECC’s representative to the ERO Enterprise Organization Registration and Certification Group.

Dave Godfrey, Vice President of Entity Oversight Dave Godfrey has executive oversight for Entity Registration, Compliance Risk Assessment, and WECC’s Compliance Monitoring efforts. Dave is jointly accountable, with Steve Goodwill, for executing WECC’s core Compliance Monitoring and Enforcement Program functions and implementing WECC’s Regulatory Philosophy. Previously, Dave served as WECC’s Vice President of Operations and Planning and Director of Standards Development and Planning Services. Dave joined WECC in 2010 as Risk Manager. Throughout his 30 years of experience in the energy industry, Dave has served in engineering, project management, risk and asset management, human resources, and compliance roles. Before joining WECC, Dave was PacifiCorp Energy’s Director of Asset Management and Compliance.

Re

lia

bil

ity

an

d S

ec

uri

ty W

ork

sh

op

Biographies


Cathy Bakk

Joe Baugh

Scott Brooksby

Deveny Bywaters

Merrill Brimhall

Greg Coventry

Michael Dalebout

Dave Godfrey

John Graminski

Debra Horvath

Gary King

Morgan King

Phil O’Donnell

Harold Sherrill

Dan Wagner

Mike Wells

Eric Weston

Tyler Whiting

Tom Williams

Ruchi Shah


John Graminski, Senior Compliance Auditor, Cybersecurity John Graminski has been an information technology professional in the electric utility industry since 1991. During this time, John has gained extensive experience with real-time energy management and supervisory control and data acquisition (SCADA) systems, power plant and substation automation technologies, smart grid and smart meter initiatives, complex data communications networks, and cybersecurity. John spent eight years in senior management positions developing information and operations technology strategies, managing large-scale projects, and leading teams of highly successful technology professionals. John joined WECC in 2015.

Debra Horvath, Senior Enforcement Analyst, Critical Infrastructure Protection Debra Horvath joined WECC in March 2016 as a Senior Enforcement Analyst for Critical Infrastructure Protection (CIP). Prior to joining WECC, Debra had 25 years of industry, regulatory, and NERC compliance experience, working for Portland General Electric in various departments (Human Resources, Rates and Regulatory, Accounting, and FERC Compliance).

Gary King, Senior Compliance Auditor, Cybersecurity Gary King serves as WECC’s lead Physical Security Compliance Auditor. Gary is known as an enterprising security leader with extensive experience in developing and managing people, programs, projects, technology, cyber security, physical security, compliance, and information protection programs within the utility sector. Prior to joining WECC, Gary worked for five years at Southern California Edison as the Principal Manager of Physical Security Technology and Corporate Security NERC Critical Infrastructure Protection (CIP) compliance program. He is a recognized industry leader, having held positions as Director and Vice President of wireless systems engineering, technical operations, physical security, compliance assessment, and assurance programs.

Morgan King, Senior Compliance Auditor, Cybersecurity Morgan King serves as WECC’s Senior Compliance Auditor for Cybersecurity and has worked in the information systems industry for 11 years. As Senior Network Security Administrator for Edgerton, Germeshausen, and Grier, Inc. (EG&G) Defense at the U.S. Army Chemical Weapons Depot, he was responsible for the Enterprise Network Security and maintaining U.S. government Department of Defense Information Assurance Certification and Accreditation Process (DIACAP) Compliance and Information Assurance.

Re

lia

bil

ity

an

d S

ec

uri

ty W

ork

sh

op

Biographies


Cathy Bakk

Joe Baugh

Scott Brooksby

Deveny Bywaters

Merrill Brimhall

Greg Coventry

Michael Dalebout

Dave Godfrey

John Graminski

Debra Horvath

Gary King

Morgan King

Phil O’Donnell

Harold Sherrill

Dan Wagner

Mike Wells

Eric Weston

Tyler Whiting

Tom Williams

Ruchi Shah


Phil O’Donnell, Manager, Operations and Planning Audits Phil O’Donnell joined WECC as a Senior Compliance Engineer in January of 2008. Prior to joining WECC, he worked for Sacramento Municipal Utility District (SMUD) as a Senior Power Systems Operator. In this capacity, he gave training, technical oversight, and guidance to power system operation staff in the areas of transmission services, as well as managing the transmission service and real-time scheduling processes. Prior to working for SMUD, Phil worked for the California Independent System Operator for six years in real-time scheduling positions and for 14 years at Arizona Public Service Company as Senior Operations Standards Advisor, Control Room Operator, and Power Plant Operator.

Harold Sherrill, Senior Internal Controls Analyst Harold Sherrill has been instrumental in the continued development of the ERO Risk-Based Internal Controls Evaluation (ICE) Program. Before joining WECC, Harold worked at San Diego Gas & Electric for 15 years in various enterprise roles. As CIP Compliance Project Manager II, he oversaw CIP compliance in the medium and low-impact substation space. Harold also served as CIP lead for SDG&E Internal Controls Project. There he performed many of the functional tasks necessary to develop and conduct assessments of CIP Internal controls. As a CCNA certified and CCNP academy graduate he worked as a Network Analyst to support enterprise critical infrastructures.

Dan Wagner, Compliance Auditor, Cyber Security Dan Wagner joined WECC as a Compliance Auditor, Cyber and Physical Security Audits in March of 2018. Before joining WECC, Dan worked for Albertsons Corporation as Senior Manager of InfoSec Risk Management and IT Audit Manager. He also led risk assessments and audits of enterprise IT modernization efforts, including assessing enterprise vulnerability and threat landscapes, VCE vBlock Converged Infrastructure, disaster recovery, business continuity, physical security, logical security, storage management, vendor management, cloud security, and supply chain capabilities. Dan also worked for Arizona Public Service (AZPS) performing audits and risk assessments of AZPS regional power plant’s physical security and IT security, designing and performing audit testing in support of Critical Infrastructure Protection (CIP) compliance.

Mike Wells, Senior Compliance Auditor, Operations and Planning Mike Wells joined WECC in 2003 as an Assistant Director of Operations with assignment as staff support for the Operations Training Subcommittee and membership on the NERC Personnel Subcommittee that developed the NERC Continuing Education Program for System Operators. In March 2008, Mike became a Senior Compliance Engineer working with the Operation and Planning Standards team. Mike has over 38 years of experience in the electric utility industry working for Utah Power & Light (now PacifiCorp), Duke Energy, and WECC. His responsibilities and experience included transmission line and substation location engineering, power plant operations, interconnected system operations, and merchant functions. He has been a NERC-certified System Operator at the reliability level since 2001.

Re

lia

bil

ity

an

d S

ec

uri

ty W

ork

sh

op

Biographies


Cathy Bakk

Joe Baugh

Scott Brooksby

Deveny Bywaters

Merrill Brimhall

Greg Coventry

Michael Dalebout

Dave Godfrey

John Graminski

Debra Horvath

Gary King

Morgan King

Phil O’Donnell

Harold Sherrill

Dan Wagner

Mike Wells

Eric Weston

Tyler Whiting

Tom Williams

Ruchi Shah


Eric Weston, Senior Compliance Auditor, Cyber Security Eric Weston joined WECC in December 2008 and has worked in the information technology sector for over eight years. For the past nine years, Eric has worked closely with WECC audit teams to deploy and implement several tools and websites to improve WECC audit processes.

Tyler Whiting, Compliance Auditor, Cyber Security Tyler launched into his professional career by joining WECC in December of 2015 and has held various roles within the company. His areas of expertise include internal controls, lean management, data science, strategic direction, organizational theory, and public policy.

Tom Williams, Compliance Auditor, Cyber Security Tom Williams joined the Western Electricity Coordinating Council (WECC) in June 2018 after an 18-year career at the California Independent System Operator (CAISO) in a variety of IT and cyber roles, most recently as Security Architect. At CAISO, Tom served as chair of the WECC Cyber Security Work Group (CSWG) and participated in the WECC Data Exchange and EMS Work Group (DEMSWG) and WECC Telecommunications Work Group (TELWG). Tom has worked with NERC Critical Infrastructure Protection (CIP) standards since 2007 and was a member of CAISO’s core team in designing technical compliance solutions for both physical and cybersecurity. Tom has extensive experience in public speaking and has collaborated with multiple U.S. Department of Energy national laboratories, as well as the California Public Utilities Commission (CPUC) and California Energy Commission (CEC). Tom serves as Energy Sector Chief for InfraGard, a non-profit partnership between the private sector and the Federal Bureau of Investigation (FBI).

Ruchi Shah, Director, Risk Assessment and Mitigation Ruchi Shah joined the WECC risk team in March of 2013. In her current role, Ruchi developed and implemented the risk-based approach for WECC’s Compliance Monitoring and Enforcement. Over the last three years, Ruchi and her team have performed several Inherent Risk Assessment (IRA) and Internal Controls Evaluations (ICE), and worked closely with NERC and other regions within the ERO to further align the risk-based process. Ruchi and her team are also involved in perform risk and root cause assessment for all potential noncompliance reported to WECC and work with registered entities for mitigating these noncompliance’s. Ruchi has over 10 years of professional industry experience. Prior to joining WECC, Ruchi worked at Northwestern Energy as a Project Control Engineer and as an EMS Modeling Engineer. Prior to her industry experience, Ruchi worked as a Project Manager for a software development company.

R

eli

ab

ilit

y a

nd

Se

cu

rity

Wo

rks

ho

p

ATTENDEE LIST

R

eli

ab

ilit

y a

nd

Se

cu

rity

Wo

rks

ho

p

ATTENDEE LIST

R

eli

ab

ilit

y a

nd

Se

cu

rity

Wo

rks

ho

p

ATTENDEE LIST

Documents

WECC · Ruchi Shah Reliability and Security Workshop AGENDA OPERATIONS AND PLANNING TRACK. Reliability and Security Workshop Biographies WECC Staff Presenters Cathy Bakk Joe Baugh