[Regional Entity Logo] CONFIDENTIAL AND NONPUBLIC
[Insert Regional Entity Information such as: approver, date, version, owner, etc.]
[Regional Entity Logo] CONFIDENTIAL AND NONPUBLIC
TABLE OF CONTENTS
IRA Summary Report for {Insert Registered Entity]
Template Effective Date: April 2015
[Insert Report Date/Version]
[Regional Entity Logo] CONFIDENTIAL AND NONPUBLIC
1.0
Regional Entities perform an Inherent Risk Assessment (IRA) of a registered entity to identify areas of focus and the level of effort needed to monitor that registered entity’s compliance with selected NERC
Reliability Standards applicable to that entity’s registered functions. Regional Entities follow the process described in the ERO Enterprise Inherent Risk Assessment Guide (IRA Guide) to assess inherent risk of registered entities, and the IRA Guide serves as a common approach for the North American Electric
Reliability Corporation (NERC) and the eight Regional Entities for implementing and performing an IRA.
1
As directed by the IRA Guide, all Regional Entities will share summary IRA results with the registered entity. IRA results shared with the registered entity include risk areas identified, associated NERC
Reliability Standards and Requirements, and impact on the scope of monitoring.
This assessment was conducted solely to identify areas of focus and the level of effort needed to monitor compliance with enforceable NERC Reliability Standards applicable to the registered entity assessed.
The results of the IRA process does not change any obligation for a registered entity to be compliant with all NERC Reliability Standards applicable to the registered entity’s function(s). While the IRA process intends to inform the scope of the ERO Enterprise’s compliance oversight plan for a particular registered entity, the IRA should not be interpreted as a limitation to ERO Enterprise authority under the
NERC Rules of Procedure to conduct any compliance monitoring activities as the ERO Enterprise may determine is appropriate.
2.0
[Explain considerations used during the IRA, which include items like: Risk Elements (ERO and Regional), risk factors, and a summary entity specific information (e.g., registered functions, business structure, etc.]
3.0
The table below identifies the IRA summary results that includes risk factors and assessments made by the Regional Entity. “Risk,” within the context of the IRA process, refers to the registered entity’s unique, inherent risks to the reliability of the Bulk Power System, which is assessed to determine the appropriate level of focus for monitoring of a specific registered entity.
Consistent with the IRA Guide, the table below has been separated into three levels of inherent risk (i.e.,
Higher, Medium, and Low), based on predetermined criteria by the NERC and/or Regional Entity. The tables help the Regional Entity identify the area of focus associated with Standards and Requirements and provide explanation for inclusion within the indicated risk category.
1 The IRA Guide can be found here: http://www.nerc.com/pa/comp/Reliability%20Assurance%20Initiative/ERO_Enterprise_Inherent_Risk_Assessment_Guide_201
41010.pdf
IRA Summary Report for {Insert Registered Entity]
Template Effective Date: April 2015
[Insert Report Date/Version]
[Regional Entity Logo] CONFIDENTIAL AND NONPUBLIC
IRA Risk Factor Assessment Table
4.0
The table below provides preliminary decisions around possible CMEP tools used to monitor risks and associated Standards and Requirements determined by the IRA. The registered entity must maintain compliance for all applicable NERC Reliability Standards and Requirements, including those not identified in this IRA.
NERC Reliability Standards and Requirements for Monitoring
5.0
Date & Version Author Change Description Comments
IRA Summary Report for {Insert Registered Entity]
Template Effective Date: April 2015
[Insert Report Date/Version]