NERC CIP Audit Evidence Management demo

What the demo shows

A workflow solution for CIP teams that assembles and checks audit evidence by requirement.

One binder tab per CIP requirement, filled each night from the source systems. Each piece of evidence is read against the requirement's own words: the 35-day clock, the assets in scope, the signature. On the CIP-007 R2 tab most phrases are met; the missing patch record for two substation gateways is named, and a request is drafted to the asset owner. The compliance manager sends it, and the CIP Senior Manager signs the submission.

Transcript

1. 0:00NERC CIP Audit Evidence Management builds the CIP Audit Binder, one requirement at a time.
2. 0:09Today, proof sits in a dozen systems, and gaps surface only when the auditor samples.
3. 0:17Every night, agents read each record against the requirement's own words.
4. 0:24On Lumina's CIP-007 R2 tab, seven of eight checks are met, each with its evidence.
5. 0:34One is missing. The Kestrel Hill gateway patch record due by the 8th of September.
6. 0:42A request is already drafted to Tomas, the asset owner.
7. 0:47Marianas sends it. The clocks show three years of patch cycles, so Amis shows the next day.
8. 0:56Readiness is 89%, and every open gap has an owner and a date.
9. 1:04Built on Botminds: agents, data, screens, and governance on one platform.

Transcribed from the film’s narration. Captions are on the player.