Risk, Security & Compliance for ISOs & RTOs

CRA’s Energy Practice helps ISOs and RTOs manage the operational, regulatory, cyber, and enterprise risks associated with operating critical energy infrastructure and administering wholesale electricity markets.

Our experts combine energy-industry, reliability, cybersecurity, compliance, and risk-management experience to help clients assess vulnerabilities, strengthen controls, meet evolving requirements, and respond to significant events. We work with management, boards, legal teams, compliance organizations, and technical personnel on both proactive risk management and independent reviews.

CRA also provides independent investigative and analytical support when potential compliance failures, control weaknesses, cyber incidents, or other significant events require objective assessment.

Our services include:

• NERC reliability standards and compliance
• Critical Infrastructure Protection (CIP)
• Cybersecurity risk and preparedness
• Enterprise and operational risk management
• Compliance-program assessment
• Internal controls and control testing
• Risk and vulnerability assessments
• Independent audits and reviews
• Incident response and root-cause analysis
• Investigations and independent assessments
• Remediation and compliance improvement

Please contact energypractice@crai.com for more information.