2026 Internal Controls Workshop

Explore Internal Controls and practical approaches to CIP-015 as you prepare to develop your Internal Network Security Monitoring Program. Gain insight into strategies your peers are considering that strengthen compliance and operational security.

Discuss actionable approaches to enhance secure communication between Control Centers with your industry peers. Discover which controls can add value to your program and improve reliability across your network.

Join the conversation on key controls to consider for the use of cloud environments for BES Cyber System Information (BCSI). Hear real-world experiences from others who have successfully adopted cloud-based BCSI programs.

Discuss building a strong winterization plan by sharing best practices and lessons learned, identifying common mistakes to avoid, and clarifying expectations for onsite activities.

Discuss common misoperation causes and how RF’s results stack up compared to other regions. Explore common causes of misoperations and the RF region’s performance. The discussion will highlight frequent pitfalls identified through evidence verification and foster an exchange of best practices. Together, we’ll identify strategies to strengthen internal controls and enhance overall reliability.

Look at emerging standards for inverter-based resources and discuss strategies to embed controls that help maintain proper settings, provide reliable monitoring and recording, and drive effective corrective actions in response to system events or misoperations.

Dive into the management of TCAs across High, Medium, and Low impact programs. Explore preventive, detective, and corrective controls that strengthen compliance posture.

Understand the latest changes to CIP-003-9, including Internal Controls and vendor management requirements. Discuss implementation strategies and what your organization can do now to prepare for the April 1, 2026, effective date.

Examine the impacts of Project 2016-02 on the CIP Standards. Engage with others on challenges, changes, and recommended controls to support a smooth virtualization transition.

Discuss vegetation maintenance controls, validation of third-party contractor work, common issues in Transmission Vegetation Maintenance Plans, annual work execution, and key control points for SME handoffs.

Discuss asset management practices, ensure field equipment aligns with one-lines and matches Facility Ratings databases and model values. Review common issues, best practices, and explore strategies to strengthen your Facility Ratings program through key internal controls.

Engage in discussions on one of RF’s most frequently violated O&P Standards, focusing on implementing best practices, sharing lessons learned, and exploring strategies to strengthen asset management and effective maintenance.

After establishing initial internal controls, the next phase focuses on advancing the program’s maturity. This track will discuss strategies for enhancing and automating detective, preventive, and corrective controls. Through group discussion, participants will share best practices, lessons learned, and collaborate on defining and sustaining key controls.

This session will equip Primary Compliance Contacts and other Compliance Personnel with a thorough understanding of RF’s Audit Process, covering everything from annual scheduling processes to the audit lifecycle. Topics include scoping, audit notifications, key milestone dates, evidence review, internal controls, and much more.

Join us for a discussion on internal controls considerations during enforcement actions.  Hear directly from RF Enforcement on key internal controls considerations when mitigating violations of NERC Reliability Standards, including best practices, identifying, developing, and improving preventative, detective, and corrective controls, and other effective mitigation strategies.

Understand how the IRA/COP process shapes compliance strategy. This session will unpack how the Entity Risk Profile Questionnaire, Risk Factors, and Performance Considerations come together to build the Compliance Oversight Plan, ultimately driving scoping decisions.