1
Compliance Open Webinar June 16, 2020 Travis English Training & Outreach Specialist
Antitrust Policy ▪ All WECC meetings are conducted in accordance with the WECC Antitrust Policy and the NERC Antitrust Compliance Guidelines ▪ All participants must comply with the policy and guidelines ▪ This meeting is public — confidential or proprietary information should not be discussed in open session 3
Antitrust Policy ▪ This webinar is being recorded and will be posted publicly ▪ By participating, you give your consent for your name, voice, image and likeness to be included in that recording ▪ WECC strives to ensure the information presented today is accurate and reflects the views of WECC ▪ However, all interpretations and positions are subject to change ▪ If you have any questions, please contact WECC’s legal counsel 4
Webinar Use ▪ You have been automatically muted on entry ▪ Want to ask a question? • Raise your hand! • Use the Q&A feature 5
Agenda ▪ Introduction • Travis English, Training and Outreach Specialist, WECC ▪ The Align Project Transition Report • Mathew Barbera, Sr. Manager, Deloitte • Michael Dalebout, Manager of Enforcement Operations, WECC • Andy Rodriguez, IT Director-Business Engagement, NERC ▪ Changes to Compliance Oversight Plan (COP) timing • Scott Brooksby, Sr. Cyber Security Risk Assessment Engineer, WECC 6
COVID-19 Stakeholder Resources 7
8
The Align Project: Transition Report July 16, 2020 Michael Dalebout Manager of Enforcement Operations
The Align Project 10
Contact: Michael Dalebout Manager of Enforcement Operations mdalebout@wecc.org 11
Align Project Update July 2020 RELIABILITY | RESILIENCE | SECURITY
Align Project Update • Received FERC approval for the development of the ERO Secure Evidence Locker (ERO SEL) • Continuing to document ERO SEL business processes • Executed initial data validation exercise; additional validations will occur closer to our planned Q1 2021 Release 1 go-live • Facilitated Registered Entity testing for 5 of 6 regions • Monthly Newsletter distributed late June / early July • Developed Release 2 functional design document • End user training will begin in Q4 2020
Questions?
Align Sneak Peek Andy Rodriquez 15 RELIABILITY | RESILIENCE | SECURITY
Self-Report Submission Logging into the Locker System • User will log into the Evidence Locker through a URL (e.g. https://EROLocker.nerc.com) and be authenticated using your ERO Portal account with MFA: 16 RELIABILITY | RESILIENCE | SECURITY
My Align Landing Page 17 RELIABILITY | RESILIENCE | SECURITY
Standards Library with Self Reports 18 RELIABILITY | RESILIENCE | SECURITY
Self-Report Submission 19 RELIABILITY | RESILIENCE | SECURITY
My Findings 20 RELIABILITY | RESILIENCE | SECURITY
Requests for Information 21 RELIABILITY | RESILIENCE | SECURITY
Mitigation Management Dashboard 22 RELIABILITY | RESILIENCE | SECURITY
Evidence of Mitigation Mitigation 2020-00185-M 23 RELIABILITY | RESILIENCE | SECURITY
Canned Reporting 24 RELIABILITY | RESILIENCE | SECURITY
Export to Excel 25 RELIABILITY | RESILIENCE | SECURITY
Compliance Oversight Plan Timeline Changes July 16, 2020 Scott Brooksby Entity Risk Assessment & Registration Sr. Cyber Security Engineer
What ▪ COP will be issued based on triggers, as needed (e.g., monitoring event, entity change) ▪ Questionnaire will be issued case by case ▪ Data collection will continue to evolve (i.e., Evidence Request Tool, post-monitoring engagement, interview) 27
Why ▪ WECC’s knowledge base is maturing ▪ COPs designed for the long-term ▪ COPs are a living document 28
How Compliance Oversight Plan Entity Engaged Regional Monitoring Risk Risk (CMEP Monitoring Tools) Profile Continuous Monitoring (Triggers) 29
When Starting now: ▪ 2021 Audited entities will not receive a questionnaire ▪ 2021 COPs will be issued post-audit engagement ▪ New registered entities will receive COP ~6 months after registration • New registrations will receive a questionnaire 30
Contact: Entity Risk Assessment & Registration RAR@wecc.org 31
32
Recommend
More recommend
