Building an ERM-Lite Program for Small and Mid-Sized Utilities

Establishing an enterprise risk management program is easier than you think

Just because your utility or electric coop is small or mid-sized does not mean you cannot have a formal enterprise risk management (ERM) "lite" program. An ERM program merely formalizes things you do as a regular part of business and places a robust protocol around mitigating risk and documenting the approach.

Mitigating risk in an electric utility involves strategies such as maintaining infrastructure, investing in cybersecurity, diversifying energy sources, managing inflationary pressures, and having contingency plans for disruptions. Regular maintenance and monitoring can prevent equipment failures, while cybersecurity measures protect against cyber threats. Diversification reduces reliance on a single energy source, and contingency plans ensure preparedness for emergencies or natural disasters.

A more detailed list of some specific strategies includes:

1. Regular Maintenance and Upgrades: Implementing a rigorous schedule for equipment maintenance, inspections, and upgrades helps identify and address potential issues before they escalate into larger problems.

2. Power supply resource security: Using a combination of power supply contracts, limited wholesale market exposure, and self-generating resources is a strong hedge against price or supply disruptions.

3. Cybersecurity: Greater investment in cybersecurity is needed to provide security for power supply, customers, and employees against the growing online threats.

4. Emergency Response Planning: Developing detailed emergency response plans and mutual aid agreements for various scenarios, including natural disasters, equipment failures, and cyberattacks, ensures swift and effective actions in times of crisis.

5. Supply Chain Management: Supplier contracts, keeping base levels of inventory on hand for storms and replacement is critical. An example of this is the current transformer shortage and long lead times for substation transformer replacement.

6. Public Communication and Education: Keeping customers and the public informed about potential risks, safety measures, and expected response during emergencies helps maintain trust and ensures compliance with safety protocols.

7. Regulatory Environment: Staying up-to-date with industry trends, legislation, regulations and compliance requirements helps ensure strategy and risk mitigation are in alignment.

Formalize the risk management things you do already

Remember, the specific strategy should be tailored to the unique circumstances of the utility or electric cooperative and the types of risks it faces. ERM programs do not always need an outside consultant to be formalized, but a consultant can help facilitate the interaction of your organization's various operational and financial departments. The goal is to make sure all voices are heard and the overall plan addresses each area's concerns.