Burden Explanation V3 to V5

CIP Version 3	# of employees	% of hours	# of weeks	Hours in a week	# of Entities	Total Hours per entity	Total Hours
Category A-entities that identify critical cyber asset (50% of Category C)					345	1,920	662,400
Category B-entities not identifying critical cyber assets	3	50%	2	40	1,156	120	138,720
Category C-first time entities identifying critical cyber assets (main hours)	20	50%	8	40	6	3,200	19,200
Category C (follow-up time)	20	10%	8	40	6	640	3,840
Category D-entities dropping out (2 from old Category A and 4 from Category B)					6		(4,320)
Total Hours for CIP Version 3						5,880	819,840
CIP Version 4
Category A (reduced by 40 hours)					345	1,880	648,600
Category B	3	50%	2	40	1,144	120	137,280
Category C (main hours)	20	50%	8	40	18	3,200	57,600
Category C (follow-up time)	20	10%	8	40	18	640	11,520
Category D-entities dropping out (2 from old Category A and 4 from Category B)					6		(4,320)
Total hours added for Version 4							30,840
Total Existing Burden Hours for FERC-725B (current inventory)							850,680
Improved assumptions for existing burden hours
Category A1-One audit every 3 years					309	640	197,760
Category A1-Yearly effort (hours for Category B + 15% of audit effort)					309	408	126,072
Category A2-one audit every 1.5 years					36	1,280	46,080
Category A2-Yearly effort (hours for Category B + 15% of audit effort)					36	408	14,688
Category B	3	50%	2	40	1,156	120	138,720
Category C1-One audit every 3 years					6	1,280	7,680
Category C1-Yearly effort (hours for Category B + 15% of Category A audit effort)					6	408	2,448
Subtotal							533,448
Total Adjusted Baseline (improved assumptions + v4 burden)							564,288
			# of entities v4	# of entities now	avg hrs per entity
Moving from 1501 to 1475 existing entities (for current burden hours)			1501	1,475	20.55		(534)
Change Due to Adjustment in Estimate (in ROCIS this # is rounded to 286,927)							286,926