# WECC Reliability & Security Workshop Day 2 - NERC Information Command Center - NextEra Energy Source: https://www.youtube.com/watch?v=pRqdFEqQMZU Recap page: https://rapidrecap.app/video/pRqdFEqQMZU Generated: 2026-08-30T17:06:43.58+00:00 --- ## The Gist NextEra Energy built a dedicated NERC Information Command Center and leveraged an in house AI auditor named AVA to automate evidence generation and validation, reducing audit preparation time from six weeks to five days. ## Quick Overview NextEra Energy completely transformed its NERC CIP and OandP compliance operations by moving away from a reactive, spreadsheet heavy manual process toward continuous monitoring and automated evidence generation. By establishing a dedicated Information Command Center and implementing an AI tool named AVA, the company dramatically reduced audit preparation time and achieved significant cost savings across all its business units. **Key Points:** - NextEra Energy manages NERC compliance across six different regions and multiple subsidiaries including FPL and NextEra Energy Transmission. - Prior to the new compliance model, the company relied on over 10,000 manual spreadsheets and a reactive audit response approach that cost up to one million dollars per audit. - The newly established NERC Information Command Center functions as a centralized hub built on three main pillars: Information Management, Program Management, and Risk Management. - The custom AI tool named AVA automates data collection, validates timestamps and software versions against service request tickets, and detects off normal conditions. - The automated patch management process reduced the average completion time for patch assessments to 24 days, achieving a 41 percent decrease. - Time to complete NERC data requests tied to patch management dropped from six weeks to five days, representing over an 80 percent improvement. - The NERC Information Command Center physical space is currently being doubled in size to support both CIP and upcoming OandP compliance obligations by 2025. ![Screenshot at 25:15: The physical NERC Information Command Center established at the Jupiter West location in Florida.](https://ss.rapidrecap.app/screens/pRqdFEqQMZU/00-25-15.jpg) **Context:** Bulk electric system entities face rigorous regulatory compliance obligations set by NERC under critical infrastructure protection standards. Compliance failures can result in massive operational burdens, expensive manual audits, and severe regulatory penalties if data collection and evidence generation are not managed proactively. ## Detailed Analysis NextEra Energy overhauled its entire compliance framework by replacing fragmented business unit silos with a centralized command center and automated data ingestion pipelines. By combining source systems like Splunk, Tripwire, and Jira with custom Microsoft SQL data warehouses and an AI auditor named AVA, the organization eliminated manual spreadsheet tracking. This infrastructure allows NextEra Energy to continuously monitor its 9,000 devices and 15,000 physical openings, validate evidence in real time, and pass regulatory audits with unprecedented speed and efficiency. ### Transformation from Reactive to Continuous Compliance The old compliance approach relied on manual evidence generation and fragmented business units, creating massive inefficiencies. - Traditional audits required months of manual preparation, mock audits, and third party vendor pressure testing. - Relying on SMEs to manually gather data across 10,000 spreadsheets resulted in high operational costs and zero net gain in meeting NERC CIP standard purposes. - The new approach shifts the organization from reactive evidence gathering to continuous audit readiness through automated data acquisition and validation. - Centralized oversight ensures all eight registered entities within NextEra Energy speak with a unified voice during regulatory audits. ![Screenshot at 11:27: Comparison of the manual, reactive audit preparation process versus the proactive, automated after state.](https://ss.rapidrecap.app/screens/pRqdFEqQMZU/00-11-27.jpg) ### The Three Pillars of the NERC Center of Excellence The NERC Center of Excellence organizes its compliance structure around three fundamental management pillars. - Information Management handles data ingestion, internal controls implementation, and real time monitoring across all source systems. - Program Management ensures enterprise processes and standardized evidence outputs are uniformly applied across all registered entities. - Risk Management focuses on identifying failure modes, defining internal controls, and establishing operational models for off normal conditions. ![Screenshot at 15:24: Diagram illustrating the three pillars of Information Management, Program Management, and Risk Management.](https://ss.rapidrecap.app/screens/pRqdFEqQMZU/00-15-24.jpg) ### Data Architecture and ETL Pipelines Centralizing data from disparate source systems requires robust extraction, transformation, and loading mechanisms. - Source systems such as Avamar, BigFix, Change Gear, Jira, Tripwire, Documentum, and SharePoint feed data into the command center. - Extract, Transform, and Load pipelines translate disparate host data into standardized cyber asset nomenclature. - The centralized SQL data warehouse acts as a unified data hub used for analytics and continuous monitoring. ![Screenshot at 33:11: Architecture flow chart showing source systems feeding into ETL processors and the central data warehouse.](https://ss.rapidrecap.app/screens/pRqdFEqQMZU/00-33-11.jpg) ### AI Enabled Auditing with Advanced Virtual Auditor Advanced Virtual Auditor or AVA is an in house AI tool designed to automate evidence generation and validation. - AVA uses Python scripting and AI models to scan evidentiary screenshots and extract embedded timestamps and software versions. - The tool compares extracted evidence against service request tickets to confirm tasks were completed within required regulatory windows. - AVA automatically generates and validates NERC ERT workbooks while detecting off normal conditions instantly. - Automating the review process reduced the time required to complete NERC data requests from six weeks to five days. ![Screenshot at 53:41: Microsoft Excel output showing the automated validation report generated by the AI auditor.](https://ss.rapidrecap.app/screens/pRqdFEqQMZU/00-53-41.jpg)