The Controls Guidance and Compliance Failure Points document guides registered entities in assessing risks associated with their business activities and designing appropriate internal controls in response. WECC has identified generic control objectives to mitigate the risks associated with the associated risk categories and EOP-011-4 You may want to consider these six objectives:
Control Objective 1: Ensure risks associated with operating during emergencies are identified and analyzed. (Relates to Emergency Operations Planning)
Control Objective 2: Ensure processes are in place to prepare for and mitigate operating emergencies. (Relates to Emergency Operations Planning)
Control Objective 3: Ensure processes are in place to operate during emergencies (resiliency plans). (Relates to Operating During Emergencies/Backup & Recovery)
Control Objective 4: Coordinate during emergencies. (Relates to Entity Coordination)
Control Objective 5: Ensure processes are in place to return to normal operations. (Relates to Operating During Emergencies/Backup & Recovery)
Control Objective 6: Review and update Emergency Operating Plans. (Relates to Emergency Operations Planning)