Co-sponsored by: Heather Seibert North Shore Middle School will be hosting its annual Science Fair in a few short months.  We would like to invite you and the Institute of Electrical and Electronics Engineers to help judge this event. Our Science Fair will take place on February 8, 2017 at North Shore Middle School, located at 120 Castlegory, Houston, TX 77015.  The event will start at 8:15 a.m. and usually concludes around 2:00 p.m., once all the projects have been judged.  Our students have worked hard to complete their projects and are eager to show them off to community members and professionals in the field of science.  Volunteers will need to evaluate the entire grade level category which usually contains 15-25 projects.  Categories include Biology, Chemistry, Physics, Consumer, and Behavioral Science.  Our staff and students would greatly appreciate you offering your time and I assure you it will make a difference in these select students’ lives.  If you or any of the members of your organization are interested in volunteering, please contact me at [email protected] or 832-386-2765. Location: Galenda Park ISD North Shore Middle School 120 Castlegory Rd Houston, Texas 77015

Co-sponsored by: Kheng Swee Goh IEEE HOU Section ExCom meeting is open to Committee and Society Chairperson leaders to update IEEE Houston Section Executive Board and Committee. Space is limited.  If you are not an EXCOM member and wish to attend, please contact the Section’s Chair at Kheng Swee Goh ([email protected]) Agenda: Previous ExCom Minutes Treasurer Report Society Reports Committee Reports Old/New Business   Location: Bldg: HESS Club 5430 Westheimer Rd Houston, Texas 77056

Co-sponsored by: Jared Johnson Process plants need to be protected against physical consequences generated from cyber-attack.  The starting point for developing a program for cyber-security is the assessment of the risk posed by cyber-attacks.  Instead of starting with a blank sheet for paper for this analysis, use of the existing PHA documentation and process will provide optimal results with minimal additional work, and also ensuring that risk tolerance criteria and risk management methods are consistently applied.  This paper will explain how existing methods for process hazards analysis (PHA) of process industry plants can be expanded with an additional "cyber review".  The purpose of the cyber review is to determine if there are any cyber-attack vectors that can cause significant physical damage to the facility, and if so, make recommendations for modifying one or more of the safeguards in a cyber-vulnerable vector so that they are not vulnerable to cyber-attack, or assigning an appropriate level of performance to cyber-security measures.  The same way that definition of safety integrity levels (SIL) flow from HAZOP through LOPA to a safety instrumented system specifications, the definition of "security levels" as defined in ISA 99 (IEC 62443) can flow from the PHA through a "cyber review" to industrial control network specifications. The approach that will be discussed includes analysis of the causes of safety incidents, the safeguards that prevent the causes from resulting in consequences, and the magnitude of the consequences that might result from the realization of these hazards.  The discussion will include an example of a batch chemical reactor where a Hazards and Operability (HAZOP) study was assessed using a PHA cyber review in order to determine whether or not the facility was inherently cyber-safe, and if not, make cyber-safe recommendations and define IEC 62443 Security Level specifications. Speaker(s): Ed Marszal, Location: Bldg: HESS Club 5430 Westheimer Rd Houston, Ohio 77056

Co-sponsored by: Jared Johnson Process plants need to be protected against physical consequences generated from cyber-attack.  The starting point for developing a program for cyber-security is the assessment of the risk posed by cyber-attacks.  Instead of starting with a blank sheet for paper for this analysis, use of the existing PHA documentation and process will provide optimal results with minimal additional work, and also ensuring that risk tolerance criteria and risk management methods are consistently applied.  This paper will explain how existing methods for process hazards analysis (PHA) of process industry plants can be expanded with an additional "cyber review".  The purpose of the cyber review is to determine if there are any cyber-attack vectors that can cause significant physical damage to the facility, and if so, make recommendations for modifying one or more of the safeguards in a cyber-vulnerable vector so that they are not vulnerable to cyber-attack, or assigning an appropriate level of performance to cyber-security measures.  The same way that definition of safety integrity levels (SIL) flow from HAZOP through LOPA to a safety instrumented system specifications, the definition of "security levels" as defined in ISA 99 (IEC 62443) can flow from the PHA through a "cyber review" to industrial control network specifications. The approach that will be discussed includes analysis of the causes of safety incidents, the safeguards that prevent the causes from resulting in consequences, and the magnitude of the consequences that might result from the realization of these hazards.  The discussion will include an example of a batch chemical reactor where a Hazards and Operability (HAZOP) study was assessed using a PHA cyber review in order to determine whether or not the facility was inherently cyber-safe, and if not, make cyber-safe recommendations and define IEC 62443 Security Level specifications. Speaker(s): Ed Marszal, Agenda: 6:30 Registration 6:45 Dinner 7:15 Presentation 8:15 Q&A 8:30 Speaker Appreciation Presentation Location: Bldg: HESS Club 5430 Westheimer Rd Houston, Ohio 77056