NERC

Compliance Readiness Assesment 

 

 

How organized is your company around NERC and NERC regulatory audits?   

Want to find out? Take this assessment to evaluate your current system. 

 

Just 5 minutes to complete!
Begin Assessment

1

QUESTION 01

What physical security systems do you have deployed throughout your organization?

 

(Select all that apply)

Access Control System
Video Surveillance System
License Plate Recogntion
Perimeter Intrusion Detection System
Intercom System
Video Analytics
Visitor Management
Physical Identity Access Management System (PIAM)
Mustering System
Digital Evidence System
Incident Management through Automated SOPs
Intelligent Keys
IoT Integration

2

QUESTION 02

Out of the systems that were listed in the previous question, how would you describe the level of integration between the systems?

A: No integration, stand alone systems
B. Some integration between systems
C. All systems are integrated through a PSIM
D. All systems are unified on a single platform
BACK
NEXT

3

QUESTION 03

How often do you update your system software?

A. At least once a year
B. Every 1-3 years
C. Every 3+ years
BACK
NEXT

4

QUESTION 04

Are you aware of your security system's cyber health in real time, including items such as password configurations, firmware status, and software updates?

A. No, we have to do a manual cyber assessment to retrieve this information.
B. Partially, this information is available but we must log in to each site manually to access and pull the data.
C. Yes, this information for each site is available through a single centralized health report/dashboard. 
BACK
NEXT

5

QUESTION 05

How are you currently checking in contractors and visitors at your facilities?

A. Pen and paper sign-in sheet
B. Digital spreadsheet
C. Visitor Management System
BACK
NEXT

6

QUESTION 06

If you need to retrieve information on cardholder access, credentials, and updates, which of the following best describes your process? 

A. It's a very manual system; we must visit each site to retrieve this information which is locally stored. 
B. Each site is responsible for uploading information on cardholder access, credentials, and updates to the main system when required. 
C. We pull information from a centralized database that each site is connected to automatically. There are no separate information uploads. 
BACK
NEXT

7

QUESTION 07

If a safety incident occurs at one of your substations, how difficult is it for you to find video related to that specific incident and export it for investigation?

 

(Rate your level of difficulty on a scale of 1 - 10, with 10 being the most difficult)

BACK
NEXT

8

QUESTION 08

If an incident occurs, how does your operator know how to respond? Choose the response that best describes their process.

A. They pull out their SOP binder and follow the corresponding written procedure. 
B. They open a file on the computer and follow the corresponding written procedure. 
C. They follow an automated and responsive procedure using an incident management system.
BACK
NEXT

9

QUESTION 09

If you needed to generate a report on an incident within 15 minutes of the incident occuring, how confident are you that you would be able to do this?

 

(Rate your level of confidence on a scale of 1 - 10, with 10 being the most confident)

BACK
NEXT

10

QUESTION 10

If you were to be audited by NERC, which of the following best describes your process for retrieving information?

A. We primarily use a paper-driven process to keep track of events. Each site must produce their own record of events. 
B. We pull records from multiple systems individually and then consolidate them.
C. We can access all data and pull all records from each site from a single system.