Entity Risk Assessment

NPCC’s Entity Risk Assessment efforts are comprised of key functions including:

• Conducts Inherent Risk Assessments (IRA) on registered entities;
• Conducts formal Evaluations of Internal Controls (EIC) on volunteering registered entities;
• Develops Compliance Oversight Plans (COP) for registered entities; and
• Reviews and analyzes Internal Compliance Program (ICP) questionnaires for registered entities.

Entity Risk Assessment Resources

• The Annual ERO CMEP Implementation Plan is the annual operating plan used by the ERO Enterprise in performing CMEP responsibilities and duties. 
  Annual ERO CMEP Implementation Plan
• The ERO Enterprise Guide for Compliance Monitoring describes processes within the Risk-Based Compliance Oversight Framework to identify, prioritize and address risks to the bulk power system (BPS). Risk Elements, Inherent Risk Assessments (IRA), Internal Controls Evaluations (ICE), CMEP Tools, and Compliance Oversight Plans (COP) are addressed. 
  ERO Enterprise Guide for Compliance Monitoring
• The ERO Enterprise Guide for Internal Controls describes the approach CEAs use to assess the effectiveness of design and implementation of a registered entity’s internal controls to mitigate risks to reliability of the bulk power system (BPS) and supports the development of the entity’s Compliance Oversight Plan (COP). Guidance is provided for assessing internal controls during compliance monitoring activities. 
  ERO Enterprise Guide for Internal Controls