Electricity and gas network operators and interconnectors have to show effective systems and controls over risk and resilience, across IT, operational technology, contractors and physical assets. ERM+ links those risks to the controls, suppliers and incidents behind them, so the evidence is already assembled when it is asked for.
10 risks on the register. 8 rated High before controls, 2 after.
Select a cell to see which risks sit there and where their controls move them.
Typically 100 to 1,000 employees, established and regulated, with the risk register, supplier oversight and resilience work still run largely by hand.
What it asks
Evidence that risk, asset and resilience management work as described in your business plan and regulatory returns.
What ERM+ holds
Risks linked to assets, controls and investment decisions, with history you can report from rather than rebuild each cycle.
What it asks
Appropriate security measures for network and information systems, and incidents reported to the competent authority.
What ERM+ holds
IT and OT risks, their controls and security incidents in one record, with timestamps for when each was raised and escalated.
What it asks
Plans that hold up in a storm, a cyber event or a supplier failure, and proof they have been tested.
What ERM+ holds
Scenarios, test results and the dependencies they exercised, including field contractors and telecoms carriers.
What it asks
Visibility of the vendors and contractors critical systems and field operations rely on.
What ERM+ holds
A supplier register linked to the systems, sites and risks each supplier supports, so shared dependencies are visible.
A summary to frame the conversation, not legal advice. The first call establishes exactly which requirements apply to your firm.
Corporate IT risk is in one register, operational technology in another, and the link between them is in someone’s head.
Field services, telecoms carriers and system vendors carry operational risk that rarely appears next to the assets it affects.
When evidence is assembled by hand for each submission, the same work is repeated and the audit trail is thin.
Head of Risk / CRO
Also: Head of Operational Resilience, Risk Director
COO
Also: Head of Operations
CTO / CIO
Also: Head of IT, Head of Technology Risk
CFO
Also: Finance Director
Head of Compliance
Also: Chief Compliance Officer, Head of Regulatory Affairs
Owns and operates the physical, bi-directional gas pipeline between the UK and Belgium. An important part of the European energy supply chain, providing economic benefits and promoting security of supply across the UK and the EU.
More than 50 years of risk experience between the co-founders and over 500 with our senior associates. Implementation in weeks, not months.
Meet the team“ERM PLUS significantly reduced the time and resources for achieving regulatory compliance in risk and prudential management.”
“The expertise and professionalism of the ERM Plus team are unparalleled. Their strategic guidance and hands-on approach have been instrumental in achieving our business goals.”
We look at what you capture today, what your regulator will ask for, and whether there is a gap. If there is nothing there, no need to take it further.
A gap check, not a pitch. No project, no budget conversation, no access to sensitive data.