CMEP and Audit Support

divider icon
CMEP and Audit Support

Engage with Confidence.

Get expert CMEP support to navigate NERC audits and ongoing compliance monitoring to avoid noncompliance situations.

Full Audit Support
Self-Cert Prep & Review
Spot Check Readiness
Risk Assessment Guidance
Expert Self-Report Help
Tailored Compliance Solutions

CMEP Support Services

NERC uses various methods to assess Registered Entities’ compliance with the NERC Reliability Standards through the Compliance Monitoring and Enforcement Program (“CMEP”). These CMEP activities can occur in several different formats (see below for more details on these), and Utility Services is here to help you with all of them. All CMEP engagements have different scopes depending on various factors and your registration type, and Utility Services will provide a quote based on the scope of the CMEP engagement. Below are the typical CMEP engagements for which Utility Services can offer support:

Audit

Full audits occur periodically with advance notice and typically have the greatest scope as all applicable Standards and Requirements have the potential to be audited. For most TO, GO, GOP, DP entities, this occurs on a six-year cycle. Audits can be administered onsite or offsite.

Self-Certifications

This monitoring method requires the entity to self-assess its compliance with applicable Standards and Requirements, typically with evidence submittal. This method is offsite and is typically limited in scope.

Spot Check

Initiated by an entity’s Compliance Oversight Plan or in response to an event or operating problem. This method is a limited-scope audit that may occur onsite or offsite depending on the risk.

Inherent Risk Assessments (IRA)

NERC IRAs utilize a questionnaire to gather information about your system to determine your residual risk level and refine the standards and requirements that will be assessed in future CMEP engagements. Note that Utility Services now includes this service if you subscribe to our monthly Routine Services package.

Self-Reports

Self-Reporting is a method through which you, the Registered Entity, will identify a potential non-compliance and report it to NERC. Regional audit staff will be assigned to work with you to obtain additional information and make a final determination on the issue.

Frequently Asked Questions

divider icon
You will be contacted directly by your Regional Entity with advance notice. Some regions send “audit notification letters” via email, whereas others use the notifications within the Align portal. Most organizations are subject to a full audit every six years, with other scope-limited spot-checks that may arise in between full audits.
Utility Services will organize evidence, prepare responses to audit staff, and lead the discussions during any engagement. If needed, Utility Services may request additional evidence to support our preparations. If you have been closely working with us under a Routine and Maintenance contract, we may already have most of the evidence and information needed, greatly reducing the labor costs to complete the audit.
Whether an auditor discovers the issue or if we determined it while working with you, the audit staff will assess the potential and actual risk posed to the grid and determine the impact. While NERC may impose fines for high-risk violations, most potential non-compliances are treated as “compliance exceptions” in which no fine will be enforced and mitigating activities must be established. Utility Services will support you through every step of this process.
A picture of Maureen at a generator facility
AN image of cooling towers
Stay Compliant and Confident.

Talk with an Expert Today.

divider icon

We use cookies to improve your experience and analyze traffic on our website. By clicking “Accept” you consent to our use of cookies and tracking. Read our Cookie Policy to learn more.