1
1 Compliance Open Webinar June 16, 2020 Travis English Training - - PowerPoint PPT Presentation
1 Compliance Open Webinar June 16, 2020 Travis English Training - - PowerPoint PPT Presentation
1 Compliance Open Webinar June 16, 2020 Travis English Training & Outreach Specialist Antitrust Policy All WECC meetings are conducted in accordance with the WECC Antitrust Policy and the NERC Antitrust Compliance Guidelines
June 16, 2020
Travis English Training & Outreach Specialist Compliance Open Webinar
Antitrust Policy
▪ All WECC meetings are conducted in accordance with the WECC Antitrust Policy and the NERC Antitrust Compliance Guidelines ▪ All participants must comply with the policy and guidelines ▪ This meeting is public—confidential or proprietary information should not be discussed in open session
3
Antitrust Policy
▪ This webinar is being recorded and will be posted publicly ▪ By participating, you give your consent for your name, voice, image and likeness to be included in that recording ▪ WECC strives to ensure the information presented today is accurate and reflects the views of WECC ▪ However, all interpretations and positions are subject to change ▪ If you have any questions, please contact WECC’s legal counsel
4
Webinar Use
▪ You have been automatically muted on entry ▪ Want to ask a question?
- Raise your hand!
- Use the Q&A feature
5
Agenda
▪ Introduction
- Travis English, Training and Outreach Specialist, WECC
▪ The Align Project Transition Report
- Mathew Barbera, Sr. Manager, Deloitte
- Michael Dalebout, Manager of Enforcement Operations, WECC
- Andy Rodriguez, IT Director-Business Engagement, NERC
▪ Changes to Compliance Oversight Plan (COP) timing
- Scott Brooksby, Sr. Cyber Security Risk Assessment Engineer, WECC
6
COVID-19 Stakeholder Resources
7
8
July 16, 2020
Michael Dalebout Manager of Enforcement Operations
The Align Project: Transition Report
The Align Project
10
Contact:
11
Michael Dalebout Manager of Enforcement Operations mdalebout@wecc.org
RELIABILITY | RESILIENCE | SECURITY
Align
Project Update
July 2020
- Received FERC approval for the development of the ERO Secure Evidence
Locker (ERO SEL)
- Continuing to document ERO SEL business processes
- Executed initial data validation exercise; additional validations will occur
closer to our planned Q1 2021 Release 1 go-live
- Facilitated Registered Entity testing for 5 of 6 regions
- Monthly Newsletter distributed late June / early July
- Developed Release 2 functional design document
- End user training will begin in Q4 2020
Align Project Update
Questions?
RELIABILITY | RESILIENCE | SECURITY 15
Align Sneak Peek Andy Rodriquez
RELIABILITY | RESILIENCE | SECURITY 16
- User will log into the Evidence Locker through a URL (e.g. https://EROLocker.nerc.com)
and be authenticated using your ERO Portal account with MFA: Self-Report Submission Logging into the Locker System
RELIABILITY | RESILIENCE | SECURITY 17
My Align Landing Page
RELIABILITY | RESILIENCE | SECURITY 18
Standards Library with Self Reports
RELIABILITY | RESILIENCE | SECURITY 19
Self-Report Submission
RELIABILITY | RESILIENCE | SECURITY 20
My Findings
RELIABILITY | RESILIENCE | SECURITY 21
Requests for Information
RELIABILITY | RESILIENCE | SECURITY 22
Mitigation Management Dashboard
RELIABILITY | RESILIENCE | SECURITY 23
Evidence of Mitigation
2020-00185-M
Mitigation
RELIABILITY | RESILIENCE | SECURITY 24
Canned Reporting
RELIABILITY | RESILIENCE | SECURITY 25
Export to Excel
July 16, 2020
Scott Brooksby Entity Risk Assessment & Registration
- Sr. Cyber Security Engineer
Compliance Oversight Plan Timeline Changes
What
▪ COP will be issued based on triggers, as needed (e.g., monitoring event, entity change) ▪ Questionnaire will be issued case by case ▪ Data collection will continue to evolve (i.e., Evidence Request Tool, post-monitoring engagement, interview)
27
Why
▪ WECC’s knowledge base is maturing ▪ COPs designed for the long-term ▪ COPs are a living document
28
How
29
Entity Risk Profile
Compliance Oversight Plan Engaged Monitoring (CMEP Tools) Continuous Monitoring (Triggers) Regional Risk Monitoring
When
Starting now: ▪ 2021 Audited entities will not receive a questionnaire ▪ 2021 COPs will be issued post-audit engagement ▪ New registered entities will receive COP ~6 months after registration
- New registrations will receive a questionnaire
30
Contact:
31
Entity Risk Assessment & Registration RAR@wecc.org
32