NERC Audit Support
ScottMadden frequently helps utilities with NERC audit support. Contact us to learn how we can help support your risk and compliance projects.
At a Glance
NERC Audit Training
Provided NERC audit 101 training to utility SMEs
Audit Preparation
Ensured utility was prepared for the upcoming audit
Compliance Support
Assisted with technical and compliance support during onsite audit
Challenge
An electric utility was preparing for a NERC CIP and O&P audit to take place within the next six months. The utility started to prepare for the audit and anticipated needing support as they had discovered a significant number of RSAWs, evidence, and workflows in various states. A significant number of data requests (100+) were expected soon. The utility also had several organization and staffing challenges, including:
- Only one SME had ever been through a NERC audit before
- Evidence was spread across multiple locations and documentation was in various states
- SMEs were unsure of what evidence should be provided to answer data requests
- There was lack of knowledge in preparing RSAW narratives and in completing the NERC evidence request tool
Process
- Reviewed existing documentation and evidence to identify any potential gaps or issues
- Drafted and edited RSAWs
- Provided SME with technical and compliance to support utility directly
- Assisted and educated utility SMEs on which evidence should be provided to answer data requests
- Provided coordination and alignment of documentation, NERC audit 101 training to utility SMEs, data request management and response support, and onsite technical and compliance support during the actual audit
- Assisted with the development of material to present to utility leadership
Result
- Trained utility staff on how to be effective SMEs for a NERC audit
- Utility was able to answer auditor data requests in a timely manner and was prepared for the audit
Related Insights
Security Upgrade Project
Case Study
ScottMadden assisted Tennessee Valley Authority, a large nuclear generator, to execute its Security Upgrade Project to comply with the Code of Federal Regulations 10 CFR 73.55 and…
NERC CIP Program Recovery
Case Study
A large electric utility had received an unfavorable audit that pointed to a significant programmatic breakdown and a lack of cultural understating of NERC CIP standards.
Governance Risk and Compliance Initiative
Case Study
A southwest midsized utility that had recently undergone leadership changes desired to increase transparency into its security control and governance processes.
Let’s Work Together
We don’t solve problems with canned methodologies; we help you solve the right problem in the right way. Our experience ensures that the solution works for you.