Okay, always good to check. All right, yeah, thank you very much for the introduction and good afternoon, everyone. Thanks for joining me for today's seminar. I really appreciate the opportunity to talk with you about cybersecurity. It's an area that's been a passion and focus in mind for the last 15 years. And frankly, cybersecurity is one of the top priorities right now for the electric sector. So the objective of this seminar is to give you, I hope, a better understanding of the cybersecurity risk that the grid is facing. What are some of the approaches that we're taking to address those risks, as well as what are some of the new areas of research in this space and where do we see that going in the future? But first of all, it's a key takeaway. So we're gonna cover a lot of material today, but if you remember nothing else from this webinar, I hope that you'll take away the fact that cybersecurity is really a core component to supporting the reliability and resiliency of the grid. And it's really, I think, an enabler for deploying a lot of the new technologies that are part of the integrated grid. And I think from my perspective and the perspective of a lot of people in the industry, if you can't deploy strong and effective cybersecurity, then you really can't build out and deploy a smarter grid. So it really is a core component of helping us achieve a lot of the new technology visions and objectives going forward. So with that, I'll go on here. Quick overview on the agenda here. So I'd like to start off with a little bit of background information on some of the key research drivers that we see in the electric sector, as well as some new trends that are happening on the security space. And then I'm going to briefly go over what are the changes to the electric power system and how is that also impacting how we view risk and how we take actions as cybersecurity experts. They also do a deeper dive on cybersecurity for electric power utilities. So I'll be kind of taking the broad view of how we're addressing what tools are available to utilities that they're using for addressing cybersecurity. And I'll go from there to more of a deeper dive into cybersecurity for the integrated grid. And I'll explain what I mean by that as well as we get through the presentation. There are various terms for the changes in the grid and the future grid, you know, such as grid monetization initiative, there's smart grid and then, but the integrated grid is the term that EPRI has been using for several years. I'll go over that as well. First, a little bit of background about EPRI, if you're not familiar with who we are as a company. So EPRI conducts R&D, basically applied research and development related to almost all facets of the electric sector. So it's a generation delivery and in use of electricity. And we're an independent company. So we're not affiliated with any government institutions or national labs or not affiliated with any vendors. We don't make products per se. I think sometimes people get us confused with some of the national labs or think we're an FFRDC, but we're actually again, a separate private independent company. And so, and we are nonprofit. And one thing that's interesting about EPRI is when we were founded 40 years ago, we're actually chartered to benefit the public. So in our research portfolios and our research projects, we have to clearly state how that research is going to benefit the public as opposed to benefiting the people funding the research or the agencies funding the research. Our members, our utility members represent 90% of electricity generated and delivered in the US. And I think when you talk to people, even internationally, so there's a few EPRIs being a US company primarily, but we actually have members from over 40 or close to 40 countries now. So we do have a large international footprint as well, which gives us a very unique perspective, I think, in really understanding the trends and technologies that are being deployed around the world. So in my research program, I focus on power delivery systems and that really covers everything from transmission down to end use devices. So it's transmission systems, distribution systems, control centers, distributed energy resources, grid edge systems, et cetera. So in everything from the transmission down to the end use and end storage of electricity. Our program right now has close to 30 members from the US, but we also do have other international members as well from Europe, Middle East, East Asia, and Australia as well. So within the security program, we also have a broad footprint, which again gives us a very interesting perspective on the types of threats that utilities face because we see different types of threat campaigns and threat actors that might target Europe as opposed to the US or target both or focus on other regions of the world as well. And there's a surprising amount of commonality in terms of things like the challenges that we face as an industry as well as the threats and technologies that we use as well. And so it really lends itself to this collaborative model where we can pull our resources, pull our expertise together to try to address these challenges. And through those interactions with our members, I can really boil it down to I think four main cybersecurity research drivers. And you can think of these as areas where utilities feel pressure points in terms of pushing them to address cybersecurity in certain ways. The first one, and what we hear a lot about is there's a much more complex threat landscape out there. And I'll cover that in a little more detail in the next few slides. But the threats to the electric sector and to the grid have increased in terms of sophistication and complexity and number over the last few years. So of course that's a high on our utility members' radars, but that's also been coupled with increasing attack surface. If you're not familiar with what attack surface is, you can think of it as how an attacker could basically interface with the system, how it can touch the system. So communications channels, your network channels, even physical contact with devices, et cetera. So we're seeing that that attack surface increasing as well. Another area is this merger of IT and OT processes and technologies. And what I mean by that is traditionally utilities have been fairly siloed in terms of having their corporate IT systems and various business support systems fairly separate and managed by different groups than their groups managing the transmission and their distribution systems. For example, and they have separate technologies there. But over the last several years, we've seen, especially on the security side, kind of emerging of those IT and OT areas in terms of people, processes, and technologies. So more, I think more people may have traditionally been IT security people are supporting their business partners for cybersecurity, but we're also seeing more technologies that were traditionally in the corporate IT space now being ported over to the operations technology space and control system space. So things like intrusion detection systems now have new capabilities to better help them monitor actual control systems so they can do things like understand the SCADA protocols and the behavior of systems, et cetera. So a lot of utilities are kind of looking at how to leverage those new technologies but also change their processes to adapt to that. Security of emerging grid technologies. And that's really, I think, a lot of the focus of probably the last part of this presentation is thinking about what are the new applications and technologies being deployed on the grid? How do they change the cybersecurity risk for utilities for the grid as a whole? And how can we help reduce that risk to an acceptable level while still enabling the innovation new technologies to be deployed? Another big one actually is not as exciting for some people but changing cybersecurity regulation is also a real driver. So there are regulations in the US that cover cybersecurity for the bulk electric system. Those are, I'll talk about those a little bit more later but those change over time. In fact, there's a new one focused on supply chain that's going into effect fairly soon. And then also there are some executive orders that are impacting industry as well that I'll talk about a little bit later too. So these are really, I think the core pressure points for utilities and cybersecurity. So really quickly just give you an overview of some of the threats that we're interested in and there's a lot of references out there you can find that discuss cybersecurity threats at a high level but also for the electric sector. So a lot of good resources out there like here I've referenced this report from the director of national intelligence and it's very clear and direct that our adversaries and strategic competitors will increasingly use cyber capabilities to seek political, economic and military advantage over the United States and its allies and partners. It's very, very direct about that. But also we see a new malware being deployed. Here's some quotes and references to a new data wiper malware that was found in January of 2020. So this year also to look at some more recent threats the COVID-19 has been really interesting from a security perspective. I think there's a quote that never let a good crisis go to waste. Well, I think hackers seem to take that to heart because anytime there's a big event or something like that they're very good at crafting phishing emails, et cetera, to try to take advantage of people and compromise systems. And also as so many companies move their workforces to work remotely very quickly. So also attackers were targeting VPN systems and just overall remote access until working infrastructure as well. And here's some other quotes or references to new activities that happened in May and April out of North Korea and then also some other OT related systems that were targeted. Especially we talked with our advisors about how they've responded to the COVID-19 pandemic and transitioned their workforces to be remote as well. And they have also seen an uptick in phishing campaigns against them. So that also includes emails that look like they come from their trusted vendors as well. So phishing attacks are very good these days. And finally, another one I want to focus on was the supply chain threat. So I mentioned that there's new regulation as part of the NERC critical infrastructure protection standard. So 13 that is related to supply chain threats and that's going to affect this year. But in addition to that, there was an executive order issued on May 1st which is executive order 13-9-20. Got a link on it down here. Essentially, it's looking at threats that can come from vendors that may have ties to foreign governments, for example. And it's basically directed the DOE and other groups to put together criteria for putting particular equipment on a what they call pre-qualified vendor list. We'll also work with the industry to identify what is some of the prohibited equipment that's already in use and how can they help asset owners identify, isolate, monitor and replace the equipment as appropriate. And so this is fairly recent. There's probably more questions and answers on this. So most of us are gonna wait and see approach right now but it's just an example of how quickly it's a new regulations or new administrative orders like that can impact how utilities do business and how they address cybersecurity. So cybersecurity, it's a threat for a lot of different areas and sectors. So what makes the electric sector, I guess, unique in terms of what are their challenges and how they have to address cybersecurity. And I think a lot of it comes down to understanding some of the differences between IT systems and these operations technology systems. So on this slide I've provided a couple of different areas where there's significant differences between your more traditional enterprise IT systems and the OT systems that actually support the operation of the grid. A big one is understanding the difference between the IT and OT cybersecurity objectives. And so there are three objectives within cybersecurity that we focus on. It's called the CIA triad that confidentiality, integrity and availability. And most of the controls and processes we put in place are there to support one or more all of those security objectives at different levels. So on the IT side, it's a lot of the folks that are protecting data and protecting the confidentiality of that data. So confidentiality and integrity tend to be the higher priorities there and availability is a priority as well, but not always as critical. Whereas in real time systems like the ones that run the grid, availability is actually the highest cybersecurity objective. So keep the systems running followed by integrity and to usually much lesser extent confidentiality because a lot of the main systems that run the grid do not have, I guess, confidential data. The folks who want SCADA data and operations data there. Jump around a little bit. Another one is the device customization. These are embedded systems that are out there on the grid. They are customized for a particular system, a particular operating environment. They may use unique hardware, this different thing, your traditional IT hardware, they're resource constrained in terms of memory capabilities and processing power and also can use embedded operating systems that may be proprietary as well. So that limits some of the security tools you can use with them because you can't use it off the shelf security tools. Another one area that I think a very, very big difference is this long life cycle. So a lot of IT equipment, you may refresh that every two to three years to take advantage of better processing power and more memory. However, when you deploy equipment and systems out on the grid, those will be there for 15 to 30 years. And on top of that, you already have a lot of equipment that's been deployed. They have a large footprint of equipment that's also been out there for a significant amount of time. And so you can think from a security perspective, the challenges associated with trying to secure legacy equipment as well as new equipment, but also thinking longer term, how do we maintain security on these systems that have that limited computing power, or at least even if it's up to date now, we'll certainly feel very limited in 10 years there as well. So that also causes some challenges. So I just wanted to give you a little bit of that background information because I think understanding these threats and understanding the differences between IT and OT are really foundational to looking at what are the risks that we're trying to address right now for the grid. So now I wanted to spend a little bit of time talking about what are the changes that we're seeing on the electric power system and also how does that impact cybersecurity for the grid. So here you have a consider the very traditional electric power system where you have central generation that's running and then that basically pushes out electricity to loads. It's not static loads, but very predictable loads. So you have central generation basically supporting predictable consumption and electricity use out on the edge of the grid. So this is a historical model of how the grid has operated. Now if we look at where the power system actually says looking forward, but depending on where you are, you find a lot of these technologies deployed today. And then some of them are a lot of them coming out in the future as well. And it's really just a dramatic difference here. And you've probably been, I guess, hearing in these seminars about some of the different technologies that are being deployed on the grid. But it really changes how we operate the grid. And so now generation, again, used to be centralized. Now it has to become more flexible. So generating plants need to be able to ramp up and ramp down to match demand. Transmission distribution systems, they're becoming more controllable, more resilient as well. And that's being driven by a lot of what's happening on the right side of this picture. And so it's very interesting to think about these changes as consumers are becoming energy producers. So now you have things like your solar panels on the residential areas as well as office space, et cetera. Also, loads are becoming more interactive and dynamic as well. And that means that you can have better demand response systems, for example, as well as energy storage systems deployed out on the edge of the grid. And to make this all work, it requires integrating a lot of sensors out on the grid, a lot of more equipment monitoring. And it's new grid, it's got a lot of great capabilities. So it gives you better visualization what's happening on the grid, better awareness. Also, and the goal is to really integrate a lot of these new technologies that are happening on the grid edge. So really integrate the distributed energy resources as well as these other grid edge systems. And so to make this happen, you can see it's going to require more telecom systems as well as cybersecurity really being part of that infrastructure to build this out. And you can think of this as being more like a system of systems, I guess, with multiple parties now taking part in the generation and use and storage of electricity. So get a huge, huge shift from where we were before, in terms of traditional way of running the grid, and then where we are now, where it's in very flexible, resilient, and dynamic for the power system. Let's see here. There we go. All right, so speaking about some of the threats that I discussed and also these changes to electric grid, how do utilities go about addressing cybersecurity for their systems? And there's a couple of ways to frame that. One you could think about is, what are the drivers for the security decisions in the electric sector? And some of these I covered, but here it's got a good summary of it, the emerging technologies and capabilities. So what are the new grid technologies that we're deploying, where the new business capabilities we're trying to add, and how do we secure those? Again, the reliability of the grid, how do we ensure that power continues to flow and get to the end users? And then if there is a cyber incident, how do we fight through that and maintain the level of resiliency in the grid? I mentioned the regulations as well. Another is financial risk. So cybersecurity incidents can certainly disrupt operations. They may increase liability for utilities and also data privacy. So earlier I mentioned that confidentiality was not quite as high of an objective for utilities in the past. However, when you think about some of the technologies being deployed on the edge of the grid, like smart meters, for example, smart meters allow utilities to collect much more granular data about the electricity usage of their customers. And with that comes some privacy concerns. If the utilities also interfacing with other systems like DER systems, demand response systems, et cetera, there could be some other data privacy concerns as well. And so that's a little bit the newer concern for utilities. But definitely that's up there in terms of what drives their cybersecurity decisions. So to frame how they think about and how we think about cybersecurity in the electric sector, there's no shortage of frameworks. There's no shortage of documents and guidelines and recommendations out there for cybersecurity. In fact, it can be very, very overwhelming when you're first starting to get into this space. So with this slide, I wanted to help break that down for you all so that you can see and maybe understand a little bit better some of the different aspects and functions that we're trying to support in cybersecurity. So one starting point is what is your overall framework for cybersecurity? So your framework really drives how you create and govern and implement your cybersecurity program. So NIST actually developed a cybersecurity framework for critical infrastructure a few years ago. It's on, I think, Persian 1.1 right now. And that document has been, I think, adopted fairly widely now by utilities, especially in the US in terms of leveraging as a framework for assessing their security program, looking at the risks, developing profiles for where they are now in terms of security functions and capabilities and where they want to be in the future. And so if you wanted to take an interesting document to start with, it's a little more approachable that I think the NIST cybersecurity framework is a good place to start because it's fairly high level there. And so it tells you a lot about what you should be doing, what are objectives you should be looking at, and it doesn't say how to do them. So there are various documents that look at mandatory and discretionary requirements for a cybersecurity program. That's where you get into more of how you're going to support the objectives and the framework there. So I mentioned earlier that we do have mandatory cybersecurity regulation for the bulk electric system. That's this NERC CIP, NERC CIP here. And that, again, covers bulk electric systems for its generation as well as transmission systems. It does not cover distribution systems. And that's actually a really key point when you start to look at cybersecurity for the integrated grid and for grid edge systems. The current regulation covers the bulk electric system. And it's basically a set of security standards that are meant to develop and create a baseline level of security for the grid. So you can go beyond the requirements and your occurs to go beyond the requirements, but the idea is to basically set a floor, so a minimum bar there, and utilities in North America can be audited against these requirements. And they come with some pretty hefty penalties for violating them. So if you are found through an audit, it's violating some of the NERC CIP standards, you can be fined up to a million dollars per day per violation. So that's a fairly significant penalty. So that certainly takes cybersecurity and puts it up fairly high in terms of enterprise risk for utilities at least for the systems that support the bulk electric system. As well, if you Google NERC CIP fines, you can see where different companies, especially in the last two or three years, have actually started being fined multi-million dollar fines for violations with NERC CIP. So definitely pay a lot of attention to those standards. Some of the discretionary requirements, this is where you get into various controls catalogs. They're out there, the NIST A153 is a very popular one in the US. Then also there's IEC standards like 6351, which focus on some particular smart grid technologies as well as IEC 62443. And again, those are more discretionary ones, but they give you guidance on how to implement controls and what controls you should be looking at. Then another component is, how do you actually manage your overall security program? And a common standard for that is this ISO 27000 series. And again, that's really looking at your information, security management system. So that's how you actually are operating, the security program there. And that's very commonly used around the world actually. And then also there's the cybersecurity capability maturity model, which the DOE developed a few years ago. And a lot of utilities use that to look at basically how mature are they in their various processes and capabilities within different parts of their company. And the reason for that is because cybersecurity is not something that's a one and done thing. You don't just go deploy controls and then call it a day. It's supported by a lot of processes as well. And those processes are things you can mature over time, as well as your overall cybersecurity capabilities. And so these maturity models help you track that and decide where you want to be in terms of your overall cybersecurity maturity as well. And so again, it can be quite a landscape to look at and try to learn when you're first getting into cybersecurity for the electric sector here. But at the end of the day, it's also important to remember that cybersecurity isn't there just as its own end, I guess. It's something that's there to support the mission of the business. So it helps support again the reliable generation and transmission delivery and use of electricity, at least for utilities there. So these things are actually tied to your business objectives, but cybersecurity is a discipline and a practice. And so it does take a little while to get up to speed and really learn it in depth. So to help, I think take that down to a level that's a little bit easier to understand. Thought it might be useful to look at the NIST cybersecurity framework. And again, I think it's very popular with a lot of our utility members. And one of the things that's very straightforward in how it breaks it down. And so it divides security into these five function areas of identify, protect, detect, respond, and recover. Then pairs that with different categories of activities and then subcategories that aren't listed here, because there's a lot of them, as well as various informative references to help you achieve the objectives and then this cybersecurity framework. So as you see, there's a lot here, but it's really very practical when you go through and actually read what it is, it's trying to tell you to do. So let's pick governance, for example. So governance could cover how is your cybersecurity supposed to be organized? How are you assessing it? What metrics are you using to assess your security program? Risk management and risk assessment and risk management strategy. So are we accurately assessing and monitoring and communicating risk? And I think that's a big question when we start looking at the integrated grid and some of the new technologies that are being deployed, making sure that we're doing that properly. Within supply chain risk management, is do we trust the equipment we're deploying? I mentioned that's become a very hot topic in the industry in the last two years as looking at for potential attack vectors for the grid and there's lots of examples of counterfeit equipment coming out onto the grid. You can also find some examples of potentially more targeted equipment being deployed as well or things moving into that supply chain. So a lot of utilities want to ask themselves, do we trust this equipment? Do we trust the processes that our vendors are using to secure their equipment as well? It's a lot of activity happening in that space and also we're mitigating risk from third-party service providers. So in some case that could be cloud providers, for example, if we're using cloud services or some of our vendors are using cloud services or mitigating the risk from that.  So how do we manage passwords and remote access to field devices? Utilities that they have large fleet of substations that kept thousands of devices that they have to be able to access remotely and be able to manage those passwords in an efficient, effective way. Also looking further down at the protective technology, do we have the right architectures and technologies to protect these OT systems? And this is an area that we do a lot of work in looking at security architectures for new grid applications and making recommendations on guidelines and controls to help utilities protect their OT systems. Also looking down to the detect area, do we have visibility in our OT networks and devices? That's an area that we've seen a lot of movement in the last few years. I mentioned earlier that there are new intrusion detection systems available now that better understand OT systems. And so more than we're being deployed, but then historically, there's been a lot of dark parts of the OT networks that may not have been monitored. So utilities are asking themselves, do we have visibility into the network? So we know everything that's going on there. And then also are our tools configured and effective for these OT systems? Do they understand the processes? Do they understand the protocols? How do we reduce false positives when we're trying to deploy these systems in the OT space? Then if there is an incident, can our operators identify and respond to a cybersecurity attack? Do they know what to look for? This is actually a very challenging area. Skated operators are not cybersecurity experts, but they may be the first ones to notice if something unusual is happening on their systems or on their Skated Systems in particular there, but it can also be very difficult to determine if something is actually a cyber attack or if it's a device that's malfunctioning, for example. And then if there is a cyber incident, do we have the right forensics tools and capabilities to even determine which devices have been compromised? I mentioned earlier that there's a lot of proprietary operating systems and applications on their use in these devices. So you can't just use your off-the-shelf forensics tools when you're doing your analysis as you're responding to an incident. So these are just a few of the areas but I wanted to take a moment to translate what are these high-level categories mean in terms of practical questions that we're looking at in our research and that utilities have to address on a daily basis? So to help address some of these questions we do, again, research in a lot of different areas in our cybersecurity program. Over time developed a fairly holistic program to look at transmission distribution, security for DER and credit systems as well as incident threat management. And we publish a roadmap every year where we look at what are the future states in cybersecurity that we'd like to achieve as an industry and especially from the perspective of electric power utilities. What are the gaps to get there and then what are the actions to help achieve those future states? And so I'll provide you a link here for our roadmap and our roadmap doesn't just look at power delivery systems it also includes some of our cybersecurity activities that are focused on the generation sector, the nuclear sector as well as some cross-cutting areas like security metrics and supply chain security. And so I'd encourage you to, if you're interested in learning more about the challenges and where we see some of the research going very detailed level at least from the utility perspective, I think it's a good reference document. It's freely available. Anybody can go download it and take a look at it. And it gives you a summary of research we've done in the past we're doing this year and where we see things going in the next two to three years as well. So we've covered a lot of material as I mentioned at the beginning of the presentation I want you to give a little of background on some of the drivers for cybersecurity. Then talk a little bit about changes that we're seeing in the electric power system and then broadly talk about what are some of the challenges and resources for the electric sector as a whole before diving into cybersecurity for the integrated grid. We'll talk a little bit more about some of these newer technologies and applications. But before I did that, since we have covered a lot of material up to this point, I wanted to pause here to see if anybody has any questions. Thank you, Galen, for making a quick stop here. And for audience, if you have questions, please click the icon, which is a raise a hand. I'm going to unmute you so that you can ask some clarification questions. Okay, seems not, but we do have one question on the Q&A part of the question is about, I think you touch a little bit at first beginning and you may elaborate a little bit more when you discuss integrated electrical grid for cybersecurity. The question is, why can't IT associated with OT can be segregated or separated to overcome some of the challenges with upgrade cycles and the resource limitations? Okay, you repeat that by measure out. So the question is, why can't IT be separated from OT to help with some of the challenges around the refresh cycles and what was the rest of the question that... Race also may be teaching. Resource limitations, right. So in general, utilities do have some separation between their IT and OT systems. They're usually not air gapped. That's a term you might hear in the industry and it's I think a bit of a myth. I don't know that many utilities actually have true air gap between their IT and OT systems. A few do, but most don't go quite that far and there's a lot of business reasons why they don't have them complete air gapped as well in terms of how they leverage data from the grid systems there as well. But they are segregated and the interface between IT and OT systems is fairly controlled there. So usually won't have any SCADA systems on the internet, for example, or easily access from the IT side over to the OT side. Again, that's fairly controlled there. And so I think that helps with some of the more internet-based threats like you might get from phishing emails, but certainly not impossible for a very determined attacker to potentially pivot over to the OT side, but it's fairly difficult there. And so that does help provide a really good amount of protection and reduce the risk. But I think some of the challenges that we're seeing is I mentioned the growing attack surface, that out in the field, you have more field area networks being deployed, have a huge variety of communication technologies out there from microwave systems to cellular systems to find Wi-Fi out there, ZigBee systems, et cetera, as well as the fact that some devices are not as physically protected. So you have a lot of pole-top devices. You have devices on the side of somebody's house, for example, if you think about smart meters. So having that separation helps between IT and OT reduces some threat vectors and attack vectors. Again, now on the OT side, you're looking at the integrated grid that you definitely have a big increase in that attack surface there as well. And so that's also what we're concerned about. And so I think having those limited capabilities for doing things like encryption or authentication can be a challenge moving forward. Hopefully that answers the question there. Any other questions? Yeah, let's move on. So we can ask. Okay. Great. All right, so yeah, just a few more slides here. I know it's about 14 minutes left for the seminar. Wanted to make sure I have some time at the end as well to pause for questions. But right, focusing more on the integrated grid. And again, that's the term that some people might call the smart grid. For example, I like to think of it, even more as it's integrated grid because they're trying to integrate a lot of these different technologies and players into the grid. And which provides a lot of benefits, but I think it provides a lot of challenges on several which are listed here. So these are challenges for, I think mostly grid edge systems. So one is this diverse ownership and management of history and energy resources. So we have some TER systems that are utility owned, operated and managed, but then you also have a lot of customer owned as well as third party managed TERs. So these could be things like PV on your house, for example, could be storage in a home, electric vehicles, home energy management systems. You could think of building management systems for commercial buildings. Those could be controlled by third party. We have solar aggregators that could manage large numbers of solar panels as well. And so it's really become a very, again, diverse area. And the main challenges of that is when you look at from the security perspective, it's not clear what everybody's responsibilities are in terms of cybersecurity. So as you may remember from the early part of the presentation, there's a lot of activities, processes, technologies, and functions that go into support cybersecurity here. And utilities will secure what they own and operate. But now you have these other groups as well that are actually managing systems that could impact the operation of the grid. But we may not know how they're actually securing their systems. So again, you have this lack of clarity and responsibility. So you can think about who's responsible for things like deploying patches, who's tracking vulnerabilities for these grid edge systems. If there's an incident, whose responsibility is it to respond to that incident? And if you are responding to an incident, how do you coordinate that across these different groups here as well? So I think that's an area that we definitely see some challenges. And also just the pace that these technologies are being deployed. It's accelerating fast. And there's a lot of new technologies going out. There's new functional entities. I mentioned aggregators. There's also pressure for low cost solutions. So, which usually doesn't support economics of cybersecurity very well when people are more interested in things like time to market or their particular profit margin. There's well that can sometimes impact how security is managed from the vendor perspective. And then also there are, I think like established standards for these grid edge systems. So a lot of the companies are working in space are not necessarily security experts. Some of them are fairly new companies. So we may bump into lack of security knowledge and best practices. But ultimately, at the end of the day, what we're concerned about is that we think this is increasing uncertainty into the cybersecurity posture of the grid. And the part of it is just not knowing how these other parties are architecting their networks, how they're doing their access controls and whether security controls that they're deploying as well. So it's something to think about and I think from the utility perspective, there's only so much you can manage and control on that as well. In addition to that, when you look at some of the specific grid edge systems, there are standards gaps in that, in this space. So here I've just highlighted three different standards and rules that are out there that are related to DER and grid edge systems. One's a 1547 or some of the DER interconnection standard. And so it's really focuses on interoperability and it does specify some mandatory protocols that need to be supported at a smart inverter's local communication interface. And it specifies that it should use a 23.5, DMP3 or Sunspec Modbus. Now, if you're familiar with these protocols, you'll know that DMP3 and Sunspec Modbus do not have security built into them. It's only the IEEE 2030.5 that requires, I guess, a secure communication there. But it really also doesn't, as a standard, the electrically standard itself doesn't directly address cyber security four, screen occasion protocols, cyber security four, smart inverter or the interfaces, at least not in this current form there. And also in California here, right at California Rule 21, which looks at these generation facility interconnections. And so if you look at the graphic on the right side here at the very top, you can see the Rule 21 recommendation, which again is this like interconnection between the distribution system operator, for example. And I hear we just use the aggregator system in the cloud as just one potential interconnect there. And it does specify, I would recommend the 2030.5 there, but as you can see from this large red circle here, that does not drive any requirements for how an aggregator might interface with the smart inverters themselves or any security controls on that. And that doesn't mean that there aren't security controls being implemented, but they're not required. And because these are proprietary systems, we just don't have a lot of information to insight into how those connections are being secured. So a utility can specify cyber security and privacy requirements through a DER interconnection agreement. So there's one tool that they have to drive some security requirements. And that can be helpful in some types of interconnects, could be helpful for other systems like micro grids, for example, that could connect to the grid. There's some tools, but then again, there's just a lot of connections and unknowns out there as well. So I mentioned that IEEE 2030.5 is recommended under rule 21, but if you really dig into that standard and you have a background in insecurity of PKI, you'll notice that the model that's proposed in 20305 actually has some cyber security risks that are inherent in the way it's been developed. So for one, there's not ability to do certificate revocation on it, which it's a very important aspect of doing a PKI. Being able to revoke certificates can be compromised. And then also this risk of CA collapse where you can allow root CA signing for end devices as well. And so that's another challenge that we've raised some awareness on that's looking at being addressed right now as well. And so it's kind of interesting when you first look at it, you might say, okay, I see some secure protocols that are recommended out there, but when you actually diagram out the systems, look at the different connection points and how the technology is really being deployed. Again, you see some gaps in terms of known security requirements out there and security regulations as well. And so that's something that we are very interested in and focus on a lot in our research. Transferring to the next slide. So I do want to mention and bring your attention to some of our research projects and activities to help address cybersecurity for the Ingrid grid and for these DER and grid edge systems in particular. And it can be pretty overwhelming at first when you first look at it because of all the different technologies, applications and players that operate in the DER and grid edge space here. So we've looked at a security architecture for the DER integration network. And I put a little star by that one because this report is available at no cost. So you can go to epri.com type in this title and you'll be able to grab that report and download it. And I think these are live links in here as well. And so you can grab that once you get once the slides are available here. But then we're also looking at a lot of different aspects of these systems. So looking at grid security for induced devices, making recommendations on how those devices should be secured. So induced device could be things like smart thermostats, home gateways, et cetera. Also, energy storage is a big area as well. And there's a lot more storage being deployed in California and across the grid in general. And so last year we looked at what are some of the recommended guidance and considerations for cybersecurity related to those systems. Then in this year and next year, we're continuing the work we're doing but also expanding out to look at cloud security for DR and grid edge systems. A lot of these, a lot of them, but some third party companies already use cloud services to manage these grid edge systems. So we look at security architectures for that as well as DR network gateways to help control the integration of smart inverters as well as hardware security for smart inverters. And then finally, working on it, making recommendations to help address and to help understand some of the security challenges with 2030.5 and how they can be addressed. So those are areas that we're looking at and how we're trying to help address some of the security challenges. Here I wanted to list some future research directions for the integrated grid. And this is broader than just utilities. This is more industry, I think industry issues that we need to look at. Some of these I've referenced already, like what really understanding cybersecurity roles and responsibilities across all of the industry stakeholders in the integrated grid. So that's vendors, aggregators, utilities, these various other third party management systems, et cetera. Making sure we actually understand what their roles and responsibilities are as it relates to cybersecurity. Also, I think we need to adopt a more comprehensive cybersecurity framework for the integrated grid that really addresses all of the functions in the cybersecurity framework that identify, protect, detect, respond and recover. We spend a lot of time looking at protection in these protocols and other architectures that are being recommended right now. But again, security has to support all of these functions and we need a better more comprehensive framework for that. Also, I think an interesting area of research would be developing what we call multi-party grid risk model. So how do we understand the risk from these third parties if they're compromised? How can that impact the operation of the grid? I think that's not well modeled and understood right now. And then in supporting the first two bullets, creating a framework for collaborative security management. And so this was right away for a regular utility or others to basically track the cybersecurity tasks among all these different interconnected systems and third parties as well and be able to demonstrate and know are the different participants in the grid actually supporting the roles and responsibilities that they have as part of this overall integrated grid as well. I think that's a fascinating research area myself in terms of how you might be able to automate that, how you incentivize people to do that as well as brings a mix of economics, technology and policy. I think as well, if you want to try to design something like that. But I think as an industry, not just everybody, but as an industry, that's something that we really need to look into, I think to make sure we have a very secure grid going forward. So with that, I'll crash it down to one minute. So I apologize for that. I'm pausing it for any other questions. There's some questions on the Q&A. Let me pick a relatively simple one, but I think it's very interesting one, especially for a lot of students that may not have experience in this area. So can you give me a more specific example about the potential risk for the integrated grid, potential cyber risk for the integrated grid? And you mentioned the attendees list one thing which is, hey, for example, if the cyber hacker into my solar panel system, what they can do with that? Right, that's a great question. And if I had to pick one specifically, I think looking at the solar panels, in particular looking at aggregators of those systems. So if an aggregator can directly control or curtail generation through, by leveraging a connection to smart inverters, they could actually control the amount of solar generation that's happening and across the systems that they support. These aggregators can also do firmer updates as well. So imagine if an aggregator were hacked, then somebody were able to basically control those systems, then they might be able to curtail the power production or turn it back on. And depending on the level of PV penetration in the service territory, that could have a significant impact on the distribution system. It may not be enough to quote, take down the grid, but it certainly on the distribution level, I think it could cause some real problems there. But again, that's probably a specific example. And that hasn't happened before, but if you want one that's easy to relate to and understand, that would be one that I would be concerned about. Thank you, Galen. Thank you very much. And I think I received a lot of questions regarding where we can get to the recorded video. And I want to type an answer on the chat. And if anyone, if anybody interested, you can go to any of the last time for that EDU pits and watts. There's a tab, which is events. You go to the past events, you will be able to see all the recorded webinars in last five talks. And here is Galen's contact information. And so if you have any follow-on question, feel free to reach to him. Thank you, Galen again. And last but not least, I want to especially thank Wahila, Wilkie, Chin Wu Tan, and Mohamed Rasli. I'm not sure you guys be able to see them from the Zoom, but they are a smart grid coordination team. And for all the audience attended, you receive the email from them and a reminder from them to attend this webinar. And also they responsible for coordinate all the speakers regarding the practice session and the logistics. This is new to them. And historically, we all conducted a smart grid seminar from the physical meeting and workshops has been run and Chin Wu has been running that for five or six years. This is the first ever, we moved the whole quarter a seminar to the webinar form. I want to especially thank all of you, spend a lot of time to coordinate and make this happen. Thank you. And also thank our audience. And if you're interested in the future events, you also can go to the Bits and Watts website. We partner with APRI with the support from VMware. We have a special virtual workshop. It's 90 minutes each day, three days long, talk about integrate customer DR, what is the standardization, what's the security issues and the integration issues, all of these things. Okay, thank you everyone. Good afternoon.


horse for the speed of light, the cloud of dust, and a hearty high old silver, the Lone Ranger. Great sections of the western United States were thrown open to homesteaders in the years that followed the Civil War, a tidal wave of emigration headed for the new country. But the pioneers faced many difficulties, the forces of nature, hostile ranchers and Indians, and even government agents who used their public office for private gain. It was only the masked rider of the planes who protected the interests of the settlers. It was only his strength and courage that overcame the obstacles in their path and helped them realize their vision of the future. Return with us now to those thrilling days of yesteryear. From out of the past come the thundering who beat to the great horse Silver, the Lone Ranger rides again. When Jeff Carruthers got his section of land proved up and homesteaded, the first thing he did was arrange to build a decent-sized house in place of the sod cabin he'd lived in for a year. People were few and far between in that country, but they were all neighbors. Everyone came to the house raising. Yes, sir. Me and Molly have been so busy the past year homesteading our land, we ain't had time to put up a decent home. We're all pitching in, Jeff. You'll have a roof over your heads, come sundown. Just imagine living in one room for a whole year, winter and summer, and now it would have four full rooms. Molly, we're going to be the happiest couple west of the Missouri River. Hey, Jeff! Carruthers! The men are calling you, Jeff. What's eating you, Jeff? We got the roof tree all ready to go up. Want us to do all the work? No, sir. Right with you, gents. Who's climbing up to the top with me? How about you, Barry? He know, Jeff. Raise you up the ladder. Your heart. Me? I'd call it a dead heat. I reckon so. Now sit tight. There ain't much room to hold on to. Grab that rope and heave. Anytime you say. All right, you gents. Hoist it up and me and Barry will set her in place and nail her down. Here she comes! Everybody! Lift her! Heave! Heave! Pull that rope, Barry. Here comes. Grab her, Barry. Keep her steady, gents. Barry and me will settle her right in the grooves where she belongs. Careful. Another inch or two. That's from one end. Hey, Texas, swimming up that mall, will you? I'll need her to knock in the other end. It's on the roof tree, Jeff. Pull it up. Can you reach it, Barry? Up a bit. I got it. Thanks. Now we can stride along this timber to the other end. Can you get a place to stand while you swing on the roof tree, Jeff? I reckon I can stand right about here. I'll hold your feet to brace you. I guess I can knock that roof tree into place with three wallops. It'll take at least six. Hear that down there? Jeff says he can do it in three. Here I go. She moved. Not enough. Here I go. Ready? Raise my feet, Barry. This is a big one. Then we slide down the rope to the ground. If you make it in three. So just watch this one. You done it, Jeff. You sure are one strong omen. Grab the rope. We're going down. What do you say we eat? Sure. Every time a new house goes up, we set down to food when the roof tree goes up. That's plenty of food. And my Molly fixed the best food you ever sat down to. Right over on the table's weakness. Just sat down on the bench. Brothers! Where's Jeff's brothers? Well, it's the sheriff. And he's got Lim Dawson with him. Well, howdy, sheriff. Howdy, Dawson. You're just in time for food.  That's right. Welcome to our new home. You're mistaken, Mrs. Curlys. This isn't your home, newer otherwise. What's that you say? This new land belongs to me. And everything ought to belong to me. Dawson, that may be your idea of a joke, but I can't say I care for it. Hey, don't joke, Curlys. Doggun. Sheriff, is he local? This is my land.  Dawson's correct. He's got the law on his side. But we homesteaded this land. We worked it. That's too bad. It so happens I homesteaded it three years ago. And what's more, I proved up on it. Spent my required year. I'm giving you orders to get off. Molly, stand aside. If there's gunplay, I want you out of the way. I got my guns, too, Jeff. You can count on me. I'm siding with you, Jeff. Say the word and we start pulling. There'll be no shooting. You hear me? Quiet down, all of you. There'll be no shooting. Sheriff, you can't do it. You know what I stand for. I've always been fair and square. Now, what are you doing here in company with that coyote? I'm sorry, ma'am. I consider you my friends, and that makes it tougher. But either I hand in my badge or I do my job. The law is a law and this here land belongs to Lem Dawson. And claim it, you got one week to clear out. That's all. One week. We hear him. Whoa, Silver, whoa. That's not right. Bullets from the same gun. Somebody's practicing shooting, Kimosabe. Me not see where. That way. Yes, I see him now. Next to that half-built house. He's standing there and... That's odd. What's the matter? That house. Why isn't he working on it? It's only half finished. Framework is up and that's all. He's out practicing a quick draw. There's something wrong. You think that? Head down the slope, Toto. We're going to check up.  All right, Silver. Jeff! Jeff! There's a masked man and an engine coming. Don't bother me, Molly. I'm sharpening up my shooting. So I can settle with Dawson next time I see him. Jeff, stop! No dawg on it, Molly. I'll tell you that I... Stop for yourself, Jeff Carothers. It's a masked man and an engine. There must be outlaws. What? Yonder over there. We're loud. My mind was occupied. I didn't notice. Well, who are you and what do you want? You don't need that gun. Speak your piece, Mr. and be sharp about it. I'm busy. So I see. A busy target shooting or a house building? What business is it of yours, Mr?  Not my business, strictly speaking. I just thought Toto and I might be able to help you. The kind of trouble I got can be settled only one way. Besides, no red skin or mask on, Rick. What in blazes? One side, where's my horse? Jeff, wait! It's Dawson. No, I'll get him. Jeff! Mr. Stop him! Stop him! Who is Dawson? What's this about? Dawson claims his homestead belongs to him and we've got to get off after working for more than a year. Jeff aims to settle it with his guns. Toto, wait here. And where are you going? I'm stopping that fight. Wait here. Come on, Silver! All right, Dawson, I told you what would happen. I came to tell you you got three days to get there. I ain't clearing out. Three days. I warned you. No man can rob me of my home. You're wearing guns and I'll get ready to use them. I'll have to share your last six feet of earth over you. Reach for your guns, Dawson. I'm drawn. Where are the guns? My hand is busted. Your hand's just numb, Dawson. I hit your gun. Curtis, I'll have the law on you for certain now. You and this party are as cheap as Mavericks is wearing a mask. There's no part of mine. He shot my gun out of my hand, too. Oh, man, so you pass with an outlaw, eh? Do you know, Curtis, I'll tell the sheriff about this, about everything. You won't only be dispossessed, but you may end up in jail. How do you get up there? You know, I don't want my pole cat. You almost slipped your neck right in the news, Curtis. Yeah, I reckon so.  I wish I had. I... No, I guess I don't. I guess I must have gone local. But what's a man to do when he stands to lose everything to a pole cat like Dawson? My office still goes, Curtis. Huh? Suppose you'd tell me the whole story. What could you do? Well, first of all, I could listen. How about it? All right, mister. Why shouldn't I tell you? Get the engine, and Molly and me will give you the whole setup right from the beginning. And that's the whole story, mister. All the way through from the time we come out here. A story that ends next Saturday, Massman. Oh, when do you leave? Next Saturday? Three more days. I don't reckon anybody can save the place for us. Is Dawson's claim legal? Yeah. It seems he proved up on this land himself a few years ago. But nobody ever told us. A government man should have told you. Well, he didn't. We figure he made a mistake. Got his land sections mixed. Yeah. He most likely thought he was directing us to a section that was free land. Well, nothing we can do about it now. I'm not so sure. Huh? What's the land agent's name? Where is he? Well, his name is Sully. His office is in town, but... Oh, we've already talked to him, mister. He's plum-disturbed about it, but he says he can't help us. Sully, huh? All right, brothers. You'll hear from us. Here, Silver. Whoa, Scouts, whoa. Remember, brothers, no more gunfighting. It's a promise, mister. Well, I reckon Molly and me might just as well get ready to pull up stakes and move. You still have three days. A lot can happen in three days. Adios. Adios. Maybe see you later. Come on, Silver. Get him up, Scouts. Do you think we ever will see him again, Jeff? I don't know, Molly. Shucks, there isn't a thing he can do to help us. But still, I don't know. There's something about him that makes me wonder. Maybe he can help us, Molly. Maybe he can. You've got plan, Kimo-Sully. Have you ever heard the name Sully before, Tonneau? Sully. You mean land agent? Think back. Mm-hmm, me not savvy. Last year, Kimo-Sully, when we were near Peacock, Oh, that's right. Sully. That name a man who almost go to jail. He just missed. He was a government land agent, too. Couldn't be proved, but everyone believed he was using his office to grab land for himself. You think this same man? It's the same man, Tonneau. I'm almost certain Sully headed west from Peacock. Oh, and what we do? First, we'll take a look at this land agent. After that, if he's our man, we'll pay a visit to the sheriff. Corruthers has a right to that land, and we're going to see he keeps it. Brain up, Tonneau. Look there. Ah, two men from the house. One of them is a sheriff. He's wearing his badge. And the other one? Ah, that one's Sully. Him same man. The same man we saw in Peacock's, Tonneau. There he goes into the building. It's marked land office, so he must be the land agent. Sheriff, ride this way. Good. We'll wait for him. Ah, maybe him in with Crooks. I don't think so. At any rate, we'll soon find out. When whatever happens, Tonneau, no gunplay. Huh? No gunplay. We'll let things take their course. Just trust me and follow my lead. Hello, Sheriff. Howdy, Jim. Welcome to... We'll have all a brace and nerve your mask. Keep your hands higher, I'll let fire. You think this is the kind of town where a mask man can ride in at broad daylight? Take it easy, Sheriff. After all, there are plenty of towns in the west who would welcome a stranger with cash on him. Master Knot, it wouldn't make any difference. It makes a difference to me. This is a law, Bidentown. Take your choice, Mr. Van Moose, or go to jail. I think we'll stay, Sheriff. We, uh, we like it here.  Try to run, you get shot. You like it here so much. Let's see how you like the jailhouse. The curtain falls on the first act of our Lone Ranger story. Before the next exciting scenes, please permit us to pause for just a few moments. Now to continue our story. The Lone Ranger and Tonto allowed the Sheriff to arrest them and put them in the jailhouse. The guns were taken from them and placed in the Sheriff's desk. Silver and Scout were corralled outside. Although Tonto wondered why the mask man had told him not to resist, he asked no questions until they were locked in the cell. The boats stay right here. Soon as I get them wanted posters, I'll come back here, Mr. That mask here just comes off and... No, you'll not take off mask. No, Injun. Who will see about that? I reckon your party's wanted some place, otherwise he wouldn't wear a mask. You will not take off. Tonto, go ahead, Sheriff. We'll wait for you. If we're a man behind bars, you sure got a sense of humor. Your dog going right, you'll wait for me. All right, Tonto. I know you've been wondering about all this. Oh, why we do this? Him got guns, got silver, got Scout. Him lock herself! For a good reason, Tonto. Well, first of all, to make sure the Sheriff isn't in league with Sully and Dawson. Huh? There are plenty of sheriffs who aren't honest Kimosabi. We saw this man talking to Sully. Yet when I indirectly suggested that he take a bribe to let us alone, he refused. Oh, Tonto's savvy now. Sheriff Goodman, huh? He is. That means we can count on him. Maybe so. You'll see. Now, what's more important, Tonto? Is that Sully knows who I am? He does? Of course he does. We helped chase him out of Pecos. Not right. But what you do when Sheriff won't take off mask? We'll worry about that when he comes back. Right now. Did you notice that Sully saw the Sheriff arrest us? No, Tonto, not watch. I saw him out of the corner of my eye. He came out of his office and took his horse. I'm sure he's on his way to see Dawson. Him worried? Well, he must be. Now we'll see if he's quiet. Here comes the Sheriff. Uh, him got posted. Steady. I'll handle this. Oh, Mr. I reckon you can take off that mask so I can tell which one of these men you are. The mask stays on, Sheriff.  Carothers? What kind of lingo is this? It's straight talk. Which is much more than Dawson gave you when he told you to order Jeff off that land. Hey, listen.  What's under that mask? Who are you? Suppose I tell you that Dawson is crooked. That he's working with a land agent to cheat Jeff. Sully? He's on his way to Dawson right now. Why, your look, oh, Mr. Sully, don't even know Dawson. That's why you're wrong. Big talk, Mr. That's getting dark outside. Why not go and find out? All right, all right, I will. I'm calling your bluff. I'm heading for Dawson's place right this minute. If him and Sully are planning something, I'll hear it and I'll know it. And you and the engine can stay right here till I find out. You stay here, horse. From this point on, I go up Indian fashion. Well, I'll be. Maybe that mask ombre had something that sure looks like Sully's horse. Hey, it is Sully. He's in there with Dawson. I'll get up close and get an earful. I got our age, Dawson. It's him. It's because he's wearing the mask. The horse named Silver, the engine, it all fits. The operation, Dawson, he almost got me jailed in Paycox. I guess they ought to know the lone ranger when I see him. The lone ranger, well, I'll be. I'll be right there, then. But why did they let the sheriff put him in jail? I don't know. Maybe the sheriff don't know who he is. I do know, all right. We've got to make sure the mask man don't get out of jail, Dawson. These two ways, now that you get that land and have a chance to sell it. I can sell it easy. It's gold on that land. Even if cruders don't know it. So that's it, gold. We should discover that before her other star at the home stay. Forget it. It's fixers. They take the land, ain't it? Yeah, but what about the mask man, the engine? Yeah, I reckon we better finish him, Sully. Why, then, aren't we coyotes? It's like guns. No guns, and they can't move. All we do is go up to the cell window, shoot at him, point blank. Yeah, yeah, it could be done. It's got to be done. Can you get the sheriff out of the way? I reckon I can make up some excuses. Oh, you can. It's every time. You draw the sheriff away, and I'll do the shooting. We can fix the nanobind later if one's needed. Come on, the horses are outside. Now's my chance. All the dirty, cheatin' rattlesnakes, them two are the worst. I'll go and see the sheriff. Roll up your hands. What's this, the sheriff?  I'm right here, Sully. What are you seeing as how you are asking for me? Why, what's the gun for, sheriff? There ain't no point. Never mind the talk, Sully. It so happens I heard every word you said. You what? Yeah. You two are going into jail, and the mask man, the engine are coming out. Well, Dawson, I reckon the game's up. You know, sheriff, we surrender. All right, hand over your guns. Yeah. Go ahead, Dawson. Give him your guns. Here, that sheriff. You got his dead rats. Here you are. But first, no funny business. Now, Dawson, I should get his gun out. I got him. That's work, Sully. He's out cold in the dead buffalo. Do we finish him? No, no sense doing that if it ain't needed. Grab his feet. We'll drag him into the cabin. It's pretty a rope inside. You know, we tie him up and gag him. Keep him here until afterwards. Afterwards. What do you mean afterwards? The lone ranger, Dawson, the mask man, we're going to town and finish off the mask man, his engine part, like you said. And to anybody who asks about the sheriff, we spread the yarn that he went after the killers. Have you? Sully, I get it. Then we take care of the sheriff, eh? Right. There won't nobody suspect us then. Now come on, get that rope. We got a hit for town. Town's asleep. There's nobody watching. If you step smart, the jail is. Soon as we shoot, run for the horses. Yeah. You want to stay here or take care of the sheriff? Hey, Reagan, you better stay, Sully. You got a slicker tongue with me. I'm scared, eh? Well, eh, we're going to take care of the sheriff, eh? Don't forget. With the buddy's body, we should leave it. I'll tell folks the killers headed west. You take him across to the canyon trail on his horse.  In the past, he gets there, they'll figure the killers got him. Yeah, it'll be a cinch. Now, easy. Here's the jailhouse. Get you going handy. Look through the window. Yeah. See them. Oh, no, I'd. Yeah, wait. They're asleep, Dawson. Hold up on the bunks. Yeah. I can just make them out. Boots beside one bunk, marcosons beside the other. Yeah, this is like shooting prairie chickens. Easy, eh? Daw, beat on the engine. I'll take the man from here. All ready? Yeah. Empty your gun, Dawson. And don't miss. It's done it. We got the lone ranger back to your horse. Take care of the share. It's the jailhouse. What you shooting for? What happened? Sully. Sully, did you see him? I sure did, Perry. I was working late in my office. Two men ran off to the jailhouse and fired at the prisoners. They're done for. Where's the share? He's down there after him. He told me to gather a posse and trail along.  Hurry up, get your posse.  Bring your guns. I'll take the boys a couple of minutes. Who are those prisoners, Sully? They're new, aren't they? Yeah. Did you take a look at them? Not yet, but they're outlaws, as Shale said. Mass man and engine. A mass man? You sure they're outlaws? Why? What makes you think different? We better take a look, Sully. It isn't customary for men to ride up and shoot prisoners. Most of the time, they break them out of jail or not shoot them. What are you driving at? What else could they be? Did you ever hear the lone ranger, Sully? We sure. If it was the lone ranger in jail, there's plenty of bad men would try a trick like this. Come on. We'd better go in that jailhouse and look see. That won't be necessary, Barry. What? Well, I'll be your mass. Your guess was right, Barry. The funnel and I weren't shot. You're alive. We heard them talking outside the window. The cell door was weak and we got it open in time. And we bundled up the bedclothes to make it look as if we were sleeping. We... No, you don't, Sully. You're not getting away. Let go of me. Barry, will you guard this man? He and Dawson did the shooting. What? Yes. He and Dawson have been trying to cheat corollars out of his land. Well, I'll be tall gone. So that's a little scheme. I sure will guard him. I'll take the canyon trail. Anything you say, mister. I was going to get Jeff's brother and his wife. You're riding with the posse? No, I'm riding on a head. Here, Silver. But why go ahead, mister? What's the rush? Dawson. Dawson. After they fired in the cell, we allowed Dawson to escape so we could follow his trail to the place where he's holding the sheriff. Then the posse after me, I've got to get there in time. Yep! Hold on, Silver! He's alive. And I thought we'd got him. Why, you yellow pole cat. It'll take a better man than you to hurt the Lone Ranger. You'd better pray he stops Dawson from doing murder, Sully, because you'll both swing for it. Gents! Gents, hit the trail! Hit the canyon trail! The sheriff's been captured by Lem Dawson. The Lone Ranger's riding to save him. Hit the trail! What? What's that you say? There, did you hear that? I agree with you that's enough. Come on, boys! After him! Follow the Lone Ranger! Yep, Sheriff. That's the way me and Sully worked.  Can't do much talking with a gag, won't you? I aim to get that land for the gold. You'll be nowhere around to interfere. Matter of fact, you'll be six feet under. Rope's kind of tight, eh?  Yeah, here's the trail. Rick will stop you. Whoa, whoa, there, whoa! Take a last look at the moon, Sheriff.  That badge had to be the best place. What's that? Horses coming from Jeff's place. I reckon I ain't got time for talk. I'll let my gun do it. I'm silver writing down. Yes, man. You should not be able to say that. Drop that gun! Drop it! Ow! I won't pick it up, Bassman. Don't shoot again. Keep that stadion away from me. Stand still, Dawson. Steady, Sheriff. I'll untie that gag. It must be a ghost. Be in silly shot, sir. Point black range. We weren't in those bunks, Dawson. We were outside that cell listening as you shot. There, Sheriff. Mask man, thanks. I didn't know you were the lone ranger. Not till I heard these coyotes talking. Him and Sully got me. Sully is under arrest back in town, Sheriff. There's a posse coming behind me. Sully! That's not the posse. That's Tato with Krullers. Dawson, untie the Sheriff's ropes. Yes, yes, sir. Hey, Kimo Sully. Oh, Tato glad to see you. We hear shot. Me not know if Sheriff's still alive or what happened. You get here in time, huh? Yes, Tato. Thanks to Silver. Mr. The Engine gave me the whole story. You saved my land for me.  As for you, Lem Dawson, I hope you get what's coming to you. You're worse than a side miner. You needn't worry, Krullers. Dawson will get what's coming to him. So will Sully. Well, Sheriff, how don't I are leaving now? Can you take charge of Dawson? I sure can, Mr. Jeff. Lend me your gun so I can keep Dawson in line. Oh, here you are. It's a long engine. It's a long, Mr. Ah, Adios. Come on, Silver. Get him up, Scout. Sheriff, I won't hang, will it? You'll get what you deserve, Dawson. Gosh, look at him ride. That white horse sure is a sight in the moonlight, Sheriff. I only wish they were staying to see my house get finished. Well, he's got business elsewhere, Jeff. But don't forget, if it wasn't for the Lone Ranger, you wouldn't have any house at all. You have just heard is a copyrighted feature of the Lone Ranger Incorporated.


Kaiser Permanente Guide to Medicare Basics The National Medicare Program, which was created in 1965, has given people peace of mind and the security of knowing they'll have access to health coverage. Medicare is administered by the Centers for Medicare and Medicaid Services, or CMS, and provides healthcare coverage to people who are 65 and over and people under 65 who have certain disabilities, including end-stage renal disease after diagnosis. Medicare is made up of parts A, B, C, and D. We'll explore each one, so you have the information you need. Let's look at Part A first. Part A is hospital insurance and provides coverage for inpatient hospital, skilled nursing, hospice, home healthcare. Services not covered under Part A include custodial care and long-term care. If you've worked at least 10 years of Social Security covered employment and are over 65, you generally will pay no monthly premium for Part A. Once you're eligible, you can sign up at your Social Security office. Then you'll receive a red, white, and blue Medicare card that you'll use to get care. Next, Part B is medical insurance. It covers services like doctor visits, preventive services, inpatient and outpatient physician services, outpatient surgery, lab, radiology, durable medical equipment, dialysis, and other medical services and supplies not covered under Part A. If you qualify for Part A, you're eligible for Part B, and you'll keep your Part B benefits for as long as you continue to pay for them. And here's something important to remember. You must sign up for Part B once you are eligible, because if you don't, you may have to pay a late-enrollment penalty. This penalty increases the Part B monthly premium by 10% for each 12-month period you decline coverage. And that amount is not a one-time penalty. It lasts for as long as you remain enrolled in Part B. There are exceptions to this penalty, such as a person who continues to work after age 65. We've now covered Part A and Part B, which together make up original Medicare. Let's move on to Part C, often referred to as Medicare Advantage. Part C is the part of Medicare that allows you to choose a private insurance company to provide your Medicare benefits. Medicare Advantage plans must cover all of the services that original Medicare covers. However, hospice care and certain care for clinical research studies are exceptions. They're covered under original Medicare and not Medicare Advantage plans. If you have a Medicare Advantage plan and need these services, you can still have them covered under original Medicare. Medicare Advantage plans feature a network of providers that you must use for care. If you choose to see an out-of-network provider, you'll be financially responsible, except in the case of an emergency or urgent care. When you sign up with a Medicare Advantage plan, you still have Medicare. You'll just receive your health care coverage through a private insurance company. Once you're enrolled, you will only need to show the Medicare Advantage plan's member ID card to get care. But you should still keep your red, white, and blue Medicare card. And then there is Part D. Part D provides outpatient prescription drug coverage and can only be purchased from a private company. A Part D plan must have a list of covered drugs called a formulary, and you may only have one Part D plan at a time. You're eligible for Part D if you are entitled to benefits under Part A and or enrolled in Part B. The only way you can enroll in Part D is through one of these options, a Medicare Advantage plan that includes Part D prescription drug coverage, a standalone prescription drug plan which offers prescription drug coverage only, and some employers and unions. Like Part B, Part D also has a late-enrollment penalty. The penalty for Part D is one percent of the monthly premium for every month that you defer your enrollment. This penalty does not apply to those who are eligible for low-income subsidy, also called extra help. To apply for this program and get assistance in paying for your prescription drug premiums and costs, contact Social Security or your state Medicaid office, or call 1-800-MEDICARE for more information. Now that we've gone over the four parts of Medicare and the benefits they offer, let's go over how and when you can enroll in original Medicare. The initial enrollment period for original Medicare begins three months before your 65th birthday, and ends three months after the month you turn 65. A total of seven months. If you miss your initial enrollment period, you can sign up during the general enrollment period between January 1st and March 31st each year, and your coverage will begin on July 1st of that same year. If you decide to continue working after 65 but lose your employer or union coverage, you can take advantage of a special enrollment period, which is anytime outside of the general enrollment or initial enrollment periods. In the next part, we'll discuss enrollment in Part C and D. To be eligible, you must reside in the approved service area and have Parts A and B. Some exceptions apply, such as if you have end-stage renal disease, also known as ESRD. Medicare has specific rules about enrolling individuals with ESRD. Unless you qualify for an exception, you may not be eligible for a Part C plan. For more information, please call 1-800-MEDICARE. Additionally, if you have an employer or union health plan or other health coverage through a company that offers Medicare Advantage plans, you may be able to join one of their Medicare Advantage plans. Most Medicare Advantage plans have limited enrollment periods. The initial enrollment period for a Medicare Advantage plan with Part D is the same as original Medicare. You have a total of seven months to enroll. The three months before you turn 65, your birthday month, and the three months after you turn 65. The Medicare Advantage Open Enrollment Period, or MAOEP, begins the first of the month you are first eligible for Medicare Parts A and B and lasts for three months. For instance, March 1st through May 31st if you become eligible for Medicare Parts A and B in March. During the Medicare Advantage Open Enrollment Period, you can switch to another Medicare Advantage plan or disenroll and return to original Medicare. If you miss your initial enrollment period, you can still enroll in a Medicare Advantage plan with Part D during the annual election period between October 15th and December 7th. During this period, all Medicare beneficiaries may enroll, drop or change their Medicare Advantage and or Part D plan. Your plan will then become effective January 1st of the following year. This is also referred to as the fall open enrollment season in some Medicare publications. You may qualify for a continuous enrollment period if you are eligible for low-income subsidy, also referred to as extra help. To see if you qualify for extra help, call 1-800-MEDICARE. There are also special election periods based on individual beneficiary qualifications that allow you to change plans or enroll in a new Medicare Advantage plan outside of the regular enrollment periods. Examples of these special election periods are loss of employer or union group coverage, qualification for low-income status, relocation, you have moved or are moving. If you enroll in a Medicare health plan that has received a five-star quality rating, you'll also have the freedom to sign up outside of the regular enrollment periods during the special enrollment period that's designated for five-star rated plans. Each year, the Centers for Medicare and Medicaid Services evaluate all Medicare health and prescription drug plans through their Medicare star quality rating system. Plans are given an overall rating from one to five stars. Five stars meaning excellent. These ratings are based on major categories which include preventive care, chronic care, prescription drug services, customer service, and member satisfaction. These ratings are a valuable independent source of information when comparing Medicare health plans and can help you make a more informed choice. The five-star special enrollment period runs from December 8th to November 30th of the following year for Medicare health plans and prescription drug plans that get a five-star rating from CMS. All eligible Medicare beneficiaries can take advantage of this special enrollment period. If you live in an area that offers a five-star rated plan, your coverage will begin the first of the month by considering the verification of your Medicare eligibility. Finally, we'd like to direct your attention to the Medicare Advantage Open Enrollment Period, also known as the MAOEP. Each year during the period from January 1st to March 31st, you can choose to switch to another Medicare Advantage plan or disenroll from your Medicare Advantage plan and return to original Medicare. You may also purchase a standalone Part D prescription drug plan at this time. So now you have the confidence of knowing the basics of Medicare, understanding what the four parts A, B, C, and D represent, the important enrollment periods, and the significance of the Medicare star quality ratings system. If you need more information about Social Security, data assistance, and Medicare, including Medicare star quality ratings, please use these important websites and phone numbers displayed here. These references can also be found in our enrollment materials. We invite you to visit our website, kp.org slash Medicare, where you can learn more about the benefits and services we offer, and even enroll online. Thank you for watching. And stay well.


This will be the first on cloud event of that size. I mean at the beginning We had like five people ten people sitting together as a hackathon to work on own cloud this time We expect we already have registration way over 100 people So this will be a really really big event and it will be the most of the days will be hacking working on our own cloud features But one day for the first time we have dedicated for talks So there will be two keynotes We are really really happy that we got then Callahan from Mozilla to give a keynote talking about the importance of self-hosting and free software and own cloud and then I also will do a second keynote Talking about some of the visions and ideas and plans for the future And then we have lots of lightning talks where like everybody can talk about the small areas where they're working on we have workshops where people can learn about own cloud development and Yeah, like I said, of course lots of time to actually implement the features So that's the basic idea of the conference And if you're interested if you want to participate and you don't have to be a code All right We are also looking for people have a documentation help with testing and and design and all kinds of areas So please please join us Ongla.org slash conf and they can you can sign up there