Regulatory & compliance⏱ ~1 minNO

Internal control

A documented system showing that an organisation actually complies with the requirements it is subject to. Mandatory for KBO units under section 2-10 of the Norwegian power emergency preparedness regulation.

Definition

Section 2-10 of the regulation requires KBO units (power supply preparedness organisation units) to have an internal control system documenting that they follow the Energy Act, the Energy Act Regulations and the power emergency preparedness regulation. The system must be arranged so that supervision can be carried out, it must show that required measures are in place and working as intended, and it must be kept up to date so that it reflects the actual state of affairs. NVE does not prescribe what kind of system is used or how comprehensive it must be.

In practice

Internal control is not the same as a certification, but the two are connected: an ISO 27001 management system can supply much of the documentation internal control needs, without replacing it. In an inspection the point is to be able to show the link between a requirement, the measure covering it, and the evidence that the measure works - quickly. Systems that produce logs and traceability by themselves are therefore worth more in an inspection than documentation written after the fact.

Suggest a correction

Internal control

Definition

In practice

See also:

You might also like