| CIP Version 3 |
# of employees |
% of hours |
# of weeks |
Hours in a week |
# of Entities |
Total Hours per entity |
Total Hours |
| Category A-entities that identify critical cyber asset (50% of Category C) |
|
|
|
|
345 |
1,920 |
662,400 |
| Category B-entities not identifying critical cyber assets |
3 |
50% |
2 |
40 |
1,156 |
120 |
138,720 |
| Category C-first time entities identifying critical cyber assets (main hours) |
20 |
50% |
8 |
40 |
6 |
3,200 |
19,200 |
| Category C (follow-up time) |
20 |
10% |
8 |
40 |
6 |
640 |
3,840 |
| Category D-entities dropping out (2 from old Category A and 4 from Category B) |
|
|
|
|
6 |
|
(4,320) |
| Total Hours for CIP Version 3 |
|
|
|
|
|
5,880 |
819,840 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| CIP Version 4 |
|
|
|
|
|
|
|
| Category A (reduced by 40 hours) |
|
|
|
|
345 |
1,880 |
648,600 |
| Category B |
3 |
50% |
2 |
40 |
1,144 |
120 |
137,280 |
| Category C (main hours) |
20 |
50% |
8 |
40 |
18 |
3,200 |
57,600 |
| Category C (follow-up time) |
20 |
10% |
8 |
40 |
18 |
640 |
11,520 |
| Category D-entities dropping out (2 from old Category A and 4 from Category B) |
|
|
|
|
6 |
|
(4,320) |
| Total hours added for Version 4 |
|
|
|
|
|
|
30,840 |
| Total Existing Burden Hours for FERC-725B (current inventory) |
|
|
|
|
|
|
850,680 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| Improved assumptions for existing burden hours |
|
|
|
|
|
|
|
| Category A1-One audit every 3 years |
|
|
|
|
309 |
640 |
197,760 |
| Category A1-Yearly effort (hours for Category B + 15% of audit effort) |
|
|
|
|
309 |
408 |
126,072 |
| Category A2-one audit every 1.5 years |
|
|
|
|
36 |
1,280 |
46,080 |
| Category A2-Yearly effort (hours for Category B + 15% of audit effort) |
|
|
|
|
36 |
408 |
14,688 |
| Category B |
3 |
50% |
2 |
40 |
1,156 |
120 |
138,720 |
| Category C1-One audit every 3 years |
|
|
|
|
6 |
1,280 |
7,680 |
| Category C1-Yearly effort (hours for Category B + 15% of Category A audit effort) |
|
|
|
|
6 |
408 |
2,448 |
| Subtotal |
|
|
|
|
|
|
533,448 |
| Total Adjusted Baseline (improved assumptions + v4 burden) |
|
|
|
|
|
|
564,288 |
|
|
|
|
|
|
|
|
|
|
|
# of entities v4 |
# of entities now |
avg hrs per entity |
|
|
| Moving from 1501 to 1475 existing entities (for current burden hours) |
|
|
1501 |
1,475 |
20.55 |
|
(534) |
|
|
|
|
|
|
|
|
| Change Due to Adjustment in Estimate (in ROCIS this # is rounded to 286,927) |
|
|
|
|
|
|
286,926 |