nerc coordinates that.y investigate the noncompliance, the registered tenty follows a mitigation plan and submits the concern. then nerc submits it along with a recommendation for penalty for review. >> and that ferc assessment, does ferc disclose to the public the specific utility that's in violation. >> through the fast act passed a couple years ago we have the identity to identify cii. so critical energy infrastructure could be design, prints, vulnerability about specific electric system assets. ferc, as a policy looks at that information and any information that could be useful to someone who wants to impose harm on the electric system. we do not divulge that information. so over the past six to 12 months we received a number request for cei related information, including the entities who have violated some of the s.i.p. standards. we reviewed them in detail and we've determined which ones to release, which ones not to release. we are still working through that and we have released the names of some ent

nerc filed the standard with us and we approved it. it helps address some aspects of supply chain risk. we also directed nerc to go back and do additional work in the area and look at the supply chain rick associated with electronic asset control systems as well as physical control systems as well as look at the potential supply chain risk for low impact cybersecurity assets. they've conducted a report on that. and they're in the process of following up on that. i defer to jim to add additional information on that. >> so andy is right. where this is an ongoing exploration of a very complicated topic. our next step is we'll be issuing later in august what we call a 1600 data request, which will go out to all the utilities in the nerc registry and collect a lot more information on what suppliers, what equipment is actually out there. we'll have a better extent of condition which will inform what the next steps might be in order to mitigate the other steps out there. >> i look forward to seeing more of that. thank you i yield back my time

and the water and power is registered as a transmission operator under nerc. and nerc standards require that transmission operators have a reliability coordinator. since 2014, these services have been provided by peak reliability. and the only reliability coordinator for our region. and in july of 2018, they announced they'd wind down their coordinator services operations by the end of 2019. in november 2018, ferc approved the caiso to provide reliability coordinator services. and caiso provided the draft reliability coordinative services agreement on december 11, 2018. however, there was no ability to modify provisions of the agreement. and other than peak who was winding down there was no other reliability coordinator for our region. caisa was requiring the execution of the reliability coordinator services agreement by january 1, 2019, to participate in the confidential training data sharing with the caiso so we included in the customers transitions from peak to caiso. the manager signed the agreement on january 7, 2019, and caiso allowed water and power to