2023-016 Cyber Regulations - NIS Inspections

Ofgem require support to carry out and/or support the inspection of OES in the Downstream Gas and Electricity sector, ensuring OES' compliance or to gain assurance that OES are complying against their obligations with the NIS Regulations and any The Authority framework(s) and guidance. Conducting assessments of compliance with the NIS Regulations by inspecting OES through a variety of methods such as (but not limited to) reviewing, checking, investigating, demonstrating, testing, evidencing, verifying and/or validating of OES technology (networks and information systems), resilience and security controls (physical, cyber, procedural and personnel), people and/or processes. This may include validating evidence, such as (but not limited to); self-assessments, improvement plans, progression, security and risk management, to provide assessment of OES compliance with their obligations under the NIS Regulations (10) and (11).