2015 ESOS Guidelines Chapter 6 – Role of Lead Assessor

The primary role of the lead assessor is to make sure the enterprise?s assessment meets ESOS requirements. Their contribution is mandatory, with the only exception being where 100% of energy consumption received attention in an ISO 50001 that forms the basis of the ESOS report.

How to Find a Lead Assessor

An enterprise subject to ESOS must negotiate with a lead assessor with the necessary specialisms from one of the panels approved by the UK government. This can be a person within the organisation or an third party. If independent, then only one director of the enterprise need countersign the assessment report. If an employee, then two signatures are necessary. Before reaching a decision, consider

Whether the person has auditing experience in the sector
Whether they are familiar with the technology and the processes
Whether they have experience of auditing against a standard

The choice rests on the enterprise itself. The lead assessor performs the appointed role.

The Lead Assessor?s Role

The Lead Assessor?s main job is reviewing an ESOS assessment prepared by others against the standard, and deciding whether it meets the requirements. They may also contribute towards it. Typically their role includes:

Checking the calculation for total energy consumption across the entire enterprise
Reviewing the process whereby the 90% areas of significant consumption were identified
Confirming that certifications are in place for all alternate routes to compliance chosen
Checking that the audit reports meet the minimum criteria laid down by the ESOS system

Note: A lead assessor may partly prepare the assessment themselves, or simply verify that others did it correctly.

In the former instance a lead assessor might

Determine energy use profiles
Identify savings opportunities
Calculate savings measures
Present audit findings
Determine future methodology
Define sampling methods
Develop audit timetables
Establish site visit programs
Assemble ESOS information pack

Core Enterprise Responsibilities

The enterprise cannot absolve itself from responsibility for good governance. Accordingly, it remains liable for

Ensuring compliance with ESOS requirements
Selecting and appointing the lead assessor
Drawing attention to previous audit work
Agreeing with what the lead assessor does
Requesting directors to sign the assessment

The Environment Agency does not provide assessment templates as it believes this reduces the administrative burden on the enterprises it serves.

Check our similar posts

Malware

In the past, viruses were created with the sole purpose of wreaking havoc on the infected systems. A large fraction of today’s malware, on the other hand, are designed to generate revenues for the creator. Spyware, botnets, and keyloggers steal information from your system or control it so that someone else can profit. In other words, the motivation for making them is now more attractive than before.

Keyloggers can reveal your usernames, passwords, PIN numbers, and other authentication information to their creators by recording your key strokes. This information can then be used for breaking into various accounts: credit cards, payment programs (like PayPal), online banks, and others. You’re right, keyloggers are among the favourite tools of individuals involved in identity theft.

Much like the viruses of old, most present day malware drain the resources, such as memory and hard disk space, of contaminated systems; sometimes forcing them to crash. They can also degrade network performance and in extreme cases, may even cause a total collapse.

If that’s not daunting enough, imagine an outbreak in your entire organisation. The damage could easily cost your organisation thousands of euros to repair. That’s not even counting yet the value of missed opportunities.

Entry points for malware range from optical disks, flash drives, and of course, the Internet. That means, your doors could be wide open to these attacks at this very moment.

Now, we’re not here to promise total invulnerability, as only an unplugged computer locked up in a vault will ever be totally safe from malware. Instead, this is what we’ll do:

Perform an assessment of your computer usage practices and security policies. Software and hardware alone won’t do the trick.
Identify weak points as well as poor practices and propose changes wherever necessary. Weak points and poor practices range from the use of perennial passwords and keeping old, unused accounts to poorly configured firewalls.
Install malware scanners and firewalls and configure them for maximal protection with minimal effect on network and system performance.
Implement regular security patches.
Conduct a regular inspection on security policy compliance as well as a review of the policies to see if they are up to date with the latest threats.
Keep an audit trail for future use in forensic activities.
Establish a risk management system.
Apply data encryption where necessary.
Implement a backup system to make sure that, in a worst case scenario, archived data is safe.
Propose data replication so as to mitigate the after effects of data loss and to ensure your company can proceed with ‘business as usual’.

Once we’ve worked with you to make all these happen, you’ll be able to sleep better.

Other defences we’re capable of putting up include:

Disadvantages of Spreadsheets – Obstacles to Compliance in the Healthcare Industry

Most of the regulatory compliance issues we talked about concerning spreadsheets have been related to financial data. But there are other kinds of data that are stored in spreadsheets which may also cause regulatory problems in the future.

In the US, a legislation known as HIPAA or Health Insurance Portability and Accountability Act is changing the way health care establishments and practitioners handle patient records. The HIPAA Privacy Rule is aimed at protecting the privacy of individually identifiable health information a.k.a. protected health information (PHI).

Examples of PHI include common identifiers like a patient’s name, address, Social Security Number, and so on, which can be used to identify the patient. HIPAA covers a wide range of health care organisations and service providers, including: health plan payers, health care clearing houses, hospitals, doctors, dentists, etc.

To protect the confidentiality, integrity, and availability of PHI, covered entities are required to implement technical policies such as access controls, authentication, and audit controls. These can easily be implemented on server-based systems.

Sad to say, many health care organisations who have started storing data electronically still rely on spreadsheet-based systems. Those policies are hard to implement in spreadsheet-based systems, where files are handled by end-users who are overloaded with their main line of work (i.e. health care) and have very little concern for data security.

In some of these systems, spreadsheet files containing PHI may have multiple versions in different workstations. Chances are, none of these files have any access control or user authentication mechanism whatsoever. Thus, changes can easily be made without proper documentation as to who carried out the changes.

And because the files are normally easily accessible, unauthorised disclosures – whether done intentionally or accidentally – will always be a lingering threat. Remember that HIPAA covered entities who are caught disclosing PHI can be fined from $50,000 up to $500,000 plus jail time.

But that’s not all. Through the HITECH Act of 2009, business associates of covered entities will now have to comply with HIPAA standards as well. Business associates are those companies who are performing functions and services for covered entities.

Examples of business associates are accounting firms, law firms, consultants, and so on. They automatically need to comply with the standards the moment they too deal with PHI.

More Spreadsheet Blogs

Spreadsheet Risks in Banks

Top 10 Disadvantages of Spreadsheets

Disadvantages of Spreadsheets – obstacles to compliance in the Healthcare Industry

How Internal Auditors can win the War against Spreadsheet Fraud

Spreadsheet Reporting – No Room in your company in an age of Business Intelligence

Still looking for a Way to Consolidate Excel Spreadsheets?

Disadvantages of Spreadsheets

Spreadsheet woes – ill equipped for an Agile Business Environment

Spreadsheet Fraud

Spreadsheet Woes – Limited features for easy adoption of a control framework

Spreadsheet woes – Burden in SOX Compliance and other Regulations

Spreadsheet Risk Issues

Server Application Solutions – Don’t let Spreadsheets hold your Business back

Why Spreadsheets can send the pillars of Solvency II crashing down

amazon.co.uk

amazon.com

Field service and its impact on your bottom line

There are many pointers to successful field service in any business. Generally, labour hours, parts, technician efficiency, performance indicators and other bunch of data are the most important. However, the icing on top is the total revenue. If you are in business, you must be cocksure that it’s making money, and when you don’t rake in enough you need to make some business decisions quick!

For the most part, field service companies will always have a field service management software to handle all the data. But how will this affect your outlook?

Will this cause a direct increase in revenue?

What will still need to be changed so that the ship stays afloat?

Increase your service jobs

As expected, the best field management software will guarantee a positive increase in appointments per week. On average, the field service team should expect at least a 50% increase in work turnover. There is a direct relation between the revenue you should be making and the number of calls in your schedule since the only way of making more cash is to get more work done. It is not recommended to raise costs because it increases the risk of losing customers easy when they can’t meet the extra expense. Field service software will help you bring in more customers and also manage technicians.

If you have much of the hard work done for you then you?d have more time to run the show. This is why premises are trying out software because they answer many problems like:

Automation and improved work order management
Fast dispatch from an array of drag-drop scheduling tools
Easy-to-use field service apps for technicians to receive and submit work orders
Can be integrated into account systems for faster billing time

Manual operations are costly and prone to error, and they don’t come cheap. Do away with them, reduce costs, sit back and watch as new customers steadily stream in. Grow the business by building lasting relations with your workforce and customers.

Increase technician?s abilities with mobile

If you want to get more profit, bank on technicians who complete service calls. Their task is obviously the hardest. They have an unpredictable job; at times they need to come up with quick responses or they may also be required to dig deep as well. The work does not need to be slowed with an endless paper trail while they could be elsewhere giving their all. These technicians require a working mobile field service management app.

As expected, field service leaders who use a mobile field service software report close to 20% increase in service visits per technician. This translates to each technician taking nearly a fifth more calls in a day. And as we had said before, more service calls can double the profits. How can technicians get extra time from a field service mobile app?

No need to drive to work to pick orders
Less time using the phone looking for service or parts information
Reduces the time needed to go through paper-based work
Less time driving to service calls because information is routed to their mobile phones

Increase revenue from technicians

If time is spent seamlessly, dispatchers will find time in a technician?s schedule for an extra service call. With all this being done within normal working hours, the business stands to increase its bottom line. This is what makes the business grow. Not by increasing technicians but by optimum utilisation of the current staff to get maximum profit. The logic is straightforward ? a technician working 8 hours each day taking six calls a day will make more revenue than the one who takes four, because they are paid the same each, but the business benefits from the extra service calls.

The business stands to make more revenue per technician if it uses field service management software. The margins can go as high as 40% because the technician has all tools needed to get the job done faster. You increase revenue from field work too. Let technicians benefit from automated process and have all the tools for work that they need right on their mobile devices.

The target is always your bottom line

When field service leaders inquire about field service software, they need to know how it affect the bottom line: how they will spend less time drafting schedules, how each technician will increase revenue, how the business will grow. Simple as that!
Field service management applications bring a lot to the table.

Don’t waste your time crunching a lot of numbers or sorting out schedules since this is what such an application should do. Automation, optimisation and mobility are all ways of increasing revenue. Let us help you reach your goals using our top shelf field management software. This will not only help your bottom line but will let you have more time to venture into untapped potentials.