SLIDE 1
NERC Technology Update
April 18, 2019
2
Michael Dalebout WECC NERC Align 2 Benefits Improve the - - PowerPoint PPT Presentation
Michael Dalebout WECC NERC Align 2 Benefits Improve the - - PowerPoint PPT Presentation
NERC Technology Update April 18, 2019 Michael Dalebout WECC NERC Align 2 Benefits Improve the ability of NERC and the Regions to share and analyze compliance information Increase the efficiency of ERO Enterprise operations by
SLIDE 2
SLIDE 3
▪ Improve the ability of NERC and the Regions to share and analyze compliance information ▪ Increase the efficiency of ERO Enterprise operations by delivering common tools across the ERO Enterprise ▪ Define and ensure alignment of common CMEP business processes for consistency in practices and data gathering ▪ Ensure the ERO Enterprise continues to meet its obligations for planning, conducting, and reporting on the CMEP ▪ Deliver a common platform and registered entity experience
3
Benefits
SLIDE 4
▪ Single interface across regions ▪ Standardized forms and templates ▪ Consistent tracking ▪ Enhanced reporting ▪ Incorporated evidence and enforcement records ▪ Single self-certification process for all types
4
Improvements
SLIDE 5
▪ Security Technologies and Approach ▪ NIST 800-71 Guidance; ISAE3402 ▪ FEDRAMP solutions (AWS, Azure) ▪ Multi-factor Authentication ▪ Encryption Technologies ▪ Incident Response Plans
5
Security
SLIDE 6
6
Entity Impact
Audits, Spot Checks, Compliance Investigations, Complaints, and Compliance Planning
Release
3
- Est. Q3/Q4 2020
Self-Certification, Periodic Data Submittals (PDS), and Technical Feasibility Exceptions (TFE) Self-Reporting and Self-Logging, Enforcement, and Mitigation. Managing entity registration and contact information
CORES Go-Live
End of June ‘19
Release
2
- Est. Q1/Q2 2020
Release
1
September ‘19
CORES Align
SLIDE 7
Release 1
▪ Create and submit Self-Reports and Self-Logs ▪ Create and manage mitigating activities (informal) and Mitigation Plans (formal) ▪ View and track Open Enforcement Actions (EA) (resulting from all monitoring methods) ▪ Receive and respond to Requests for Information (RFI) ▪ Receive notifications and view dashboards on new/open action items ▪ Generate report of Standards and Requirements applicable to your entity ▪ Manage user access for your entity
7
Functionality
Registered Entity Users
SLIDE 8
8
Align
Release 2 Functionality
- Est. Q1/Q2 2020
- Technical Feasibility Exceptions
(TFE)
- Periodic Data Submittals (PDS)
- Self-Certifications
Note: A strategy is being developed for how these monitoring methods will be managed in the gap between releases
Release 3 Functionality
- Est. Q3/Q4 2020
- Compliance Planning (Risk, CMEP
Implementation Plan, Inherent Risk Assessment, Internal Controls Evaluation, Compliance Oversight Plan)
- Compliance Audit
- Spot-Check
- Compliance Investigations
- Complaints
SLIDE 9
9
Training
Date City, State August 27, 2019 Westminster, CO In-Person Training Tri-State Generation and Transmission Association, Inc. August 29, 2019 Folsom, CA In-Person Training California ISO September 5, 2019 WebEx Salt Lake City, UT In-Person Training & Webinar WECC September 10, 2019 Portland, OR In-Person Training Bonneville Power Authority September 12, 2019 East Wenatchee, WA In-Person Training Douglas County PUD
SLIDE 10
Contact:
Michael Dalebout Registration Manager mdalebout@wecc.org
10