Specifications include, but are not limited to: The BWL adheres to the current versions of the NERC-CIP standards under the purview of the Operations Technology and Corporate Compliance Departments. The BWL is seeking an experienced consultant to review, evaluate, and provide recommendations for improvement on the present Compliance Program. Please provide a detailed approach to work for each deliverable listed below: Current Policy and Procedure Assessment - Review existing BWL NERC-CIP Policies and Procedures. Evaluate our policies and procedures with industry best practices and regulatory requirements for a Low/Medium Impact Utility. Gap Analysis - Conduct a gap analysis to identify deficiencies and vulnerabilities in our compliance program. Prioritize gaps based on potential risk and regulatory impact. Use BWL’s Self-Report history and show how identified gaps could be better mitigated. Provide a deeper focus on high occurrence reports. Staffing Level Assessment - Evaluate the current staffing levels within Operation Technology’s NERC-CIP Compliance Department. Suggest optimal staffing levels, describe recommended roles with responsibilities which are required for an effective compliance program. Self-Report Review - Examine past self-reports and the corrective actions taken to assess the effectiveness of solving issues found. Make recommendations for improving our self-reporting process. Final Report - Summarize findings, recommendations, and suggested staffing levels in a final report to be presented to compliance stakeholders. Include an action plan for implementing proposed improvements.
