NERC Reliability Standards Audit Workbook and Evidence Review, Mock Audit

ACES is seeking qualified firms to conduct a comprehensive NERC Reliability Standards audit review and mock audit. The engagement includes two primary components: (1) detailed review and evaluation of NERC Reliability Standards Audit Workbooks (RSAWS) for applicable NERC standards with redlines/rewrites of narrative responses and evidence listings, and (2) conduct of a mock audit at the ACES facility in Carmel, Indiana.

The audit scope covers NERC Reliability Standards applicable to ACES' GOP (Generator Operator and Performance) function, including standards such as TOP-003-5, IRO-010-4, and CIP standards (CIP-005, CIP-006, CIP-007). The audit will be holistic in nature, covering ACES' compliance program rather than individual plants. However, evidence related to generating facilities will be gathered and provided by ACES. The in-scope facilities include Golden Spread Electric Cooperative (GSEC) assets and Buckeye generating units. The control center (Medium Impact classification) and co-located data center in Carmel, IN will be subject to physical walkdowns. Approximately 50 CIP cyber assets are in scope. Total generating units under GOP services include 5 units at Buckeye (Cardinal and Mone) and 13 units at GSEC (Elk, Golden Spread Panhandle Wind Ranch, and Mustang).

Key Dates: RFP issued August 22, 2023. Notice of intent to respond due August 28, 2023. Virtual meeting for prospective firms scheduled September 1, 2023, 10:00am-11:30am. Proposal submission deadline September 8, 2023. Firm selection and notification September 22, 2023. Audit materials provided to selected firm October 2, 2023. Mock audit to be conducted November 27-30, 2023 at ACES in Carmel, Indiana.

The successful bidder will prepare draft reports for both the RSAWS review and mock audit. For the RSAWS review, the report must include evidence verification ensuring all required evidence is present. For the mock audit report, emphasis is on demonstrating how well ACES is prepared to present compliance information. An on-site presentation of initial observations from the offsite evidence review and on-site interviews is required at the conclusion of the mock audit activities.