Search

The Controls Guidance and Compliance Failure Points document is intended to provide a starting point for registered entities in assessing risks associated with their business activities and designing appropriate internal controls in response. To help entities get started, WECC has identified generic control objectives to mitigate the risks associated with the risk categories mentioned above and MOD-027-1. You may want to consider these three objectives: 

Control Objective 1: Periodically verify that the turbine/governor and load control or active power/frequency control system model and the model parameters used in dynamic simulations accurately represent system behavior. 

Control Objective 2: Ensure all received data is technically sound and usable. 

Control Objective 3: Inform connected entities of verification activities. 

The Controls Guidance and Compliance Failure Points document guides registered entities in assessing risks associated with their business activities and designing appropriate internal controls in response. WECC has identified generic control objectives to mitigate the risks associated with the associated risk categories and CIP-012-2. You may want to consider these three objectives: 

Control Objective 1: Identify applicable data used in RTA and RTM. (Relates to Entity Coordination) 

Control Objective 2: Define protections for RTA and RTM data transmitted between Control Centers. (Relates to Identity Management and Access Control) 

Control Objective 3: Establish protocols or procedures for use in case of a loss of timely availability of RTA or RTM data transmitted between Control Centers. (Relates to Entity Coordination, Identity Management and Access Control)

The Controls Guidance and Compliance Failure Points document guides registered entities in assessing risks associated with their business activities and designing appropriate internal controls in response. WECC has identified generic control objectives to mitigate the risks associated with the associated risk categories and EOP-011-4 You may want to consider these six objectives: 

Control Objective 1: Ensure risks associated with operating during emergencies are identified and analyzed. (Relates to Emergency Operations Planning)

Control Objective 2: Ensure processes are in place to prepare for and mitigate operating emergencies. (Relates to Emergency Operations Planning)

Control Objective 3: Ensure processes are in place to operate during emergencies (resiliency plans). (Relates to Operating During Emergencies/Backup & Recovery)

Control Objective 4: Coordinate during emergencies. (Relates to Entity Coordination)

Control Objective 5: Ensure processes are in place to return to normal operations. (Relates to Operating During Emergencies/Backup & Recovery)

Control Objective 6: Review and update Emergency Operating Plans. (Relates to Emergency Operations Planning) 

The Controls Guidance and Compliance Failure Points document is intended to provide a starting point for registered entities in assessing risks associated with their business activities and designing appropriate internal controls in response. WECC has identified generic control objectives to mitigate the risks associated with the associated risk categories and MOD-025-2. You may want to consider these two objectives:

Control Objective 1: Verify Real and Reactive Power capabilities.

Control Objective 2: Provide verification data to entities who need the data.