How to Implement the new EPAP requirements

First Steps
When EPAP is implemented, the ERCB will create the file of all active operators from the data we have available. Then the PAT will assign a member to each operator and that PAT member will then phone each of their assigned operators to introduce themselves, to answer questions and offer assistance, and to ensure we have the contact information you want us to have for phone calls and e-mailing Compliance Assessment reports.

Once that happens, you’ll start receiving your Compliance Assessment reports.

Prior to your first Declaration
Prior to making your first Declaration, you will probably want to do the following:

1. Ensure you understand the new EPAP requirements.
2. Communicate these requirements to your senior management
3. Start thinking about when you want your declaration period to be (you have the first year to make up your mind)
4. Act on your Compliance Assessment reports when you start receiving them
5. Determine which risks of noncompliance apply to which of your facilities
6. Develop your understanding of controls
7. Identify existing or design new controls to address the risk of noncompliance
8. Develop and test your evaluation of controls procedures
9. Make a test declaration (within the first year) so you can get some feedback without risk of enforcement for anything you might have overlooked
10. Ensure you have documentation for your business processes, your control processes and your evaluation of controls processes.

Annually after first Declaration
Then, every year after that, you would do well to continue to do the following:

1. Act on the monthly Compliance Assessment report
2. Prepare an annual evaluation of controls plan and review with your senior management
3. Review and confirm the applicability of risks of noncompliance to the facilities
4. Review your control designs
5. Evaluate your controls
6. Submit your declaration (a key component is using it as a reason for discussing your successes and your plans for improvements with the executives who matter)
7. Review and update your documentation, as necessary