NOTICE DATE: September 1, 2026

NOTICE TYPE: M-B090126-01 Legal

SHORT DESCRIPTION: 2026 MIS Access Audit Attestation (MAAA) Due by October 1, 2026

INTENDED AUDIENCE: Market Participant (MP) User Security Administrators (USAs)

DAYS AFFECTED: October 1, 2026

LONG DESCRIPTION: In September 2026, each MP must generate a list of its registered USA(s) and MIS Users for each MP registration type, by DUNS number, and perform an audit thereof to ensure compliance with the ERCOT Protocols. For example, if an MP is registered with ERCOT as a Qualified Scheduling Entity (QSE), Congestion Revenue Rights Account Holder (CRRAH), and a Load Serving Entity (LSE), that MP must submit three separate MAAA forms-one for each registration type.  If an MP is registered as a QSE and CRRAH, that MP must also submit a MAAA for the County-Party (CP) registration. Completed MAAA forms must be submitted to ERCOT by October 1, 2026. See ERCOT Protocols Section 16.12.3(2) and the Market Participant Identity Management (MPIM) Digital Certificate User Guide.

You are receiving this Market Notice because you are the USA for an MP. As the USA, you are responsible for registering all MIS Users of the MP and administering their access to ERCOT's computer systems on behalf of the MP.

For the 2026 audit cycle, the form previously referred to as the Digital Certificate Audit Attestation (DCAA) has been updated and is now titled the MIS Access Audit Attestation (MAAA). Please use the MAAA form found in the ERCOT Protocols (Section 23, Form L) to verify compliance with USA and MIS Access audit requirements under the ERCOT Protocols. In connection with this update, a new email mailbox has also been established for submission of the MAAA. Please submit completed MAAA forms to MAAA@ercot.com. The prior DCAA@ercot.com mailbox will no longer be active.

If an MP cannot comply with the October 1, 2026, deadline at the time the audit requirement first applies to the MP, then the MP must request an extension by providing ERCOT a written explanation of why it cannot meet the deadline. The explanation must include a plan and timeline for compliance not to exceed six months from the original deadline. ERCOT will review any extension request submitted by an MP and notify the MP if the request is approved or denied. ERCOT may approve no more than one extension request per MP. See Protocols Section 16.12.3(3).

On or about December 15 of each year, ERCOT must report to the Public Utility Commission of Texas (PUCT), all MPs that failed to (a) properly perform the requisite MIS Access audits, and/or (b) comply with Protocols Section 16.12.3. See Protocols Section 16.12.4(2). If an MP fails to properly perform the requisite MIS Access audits and/or fails to comply with Protocols Section 16.12.3, ERCOT may disqualify the MP's USA and/or revoke any MP's MIS users assigned by that USA after notice to the noncompliant MP and the PUCT, subject to Protocols Section 16.12.4(4). See Protocols Section 16.12.4(3).

ACTION REQUIRED: In September 2026, each MP must generate a list of its registered USA and MIS Users for each registration type, by DUNS number, and perform an audit thereof. Completed MAAA forms must be submitted to ERCOT by October 1, 2026. MPs must use the current MIS Access Audit Attestation (MAAA), Section 23, Form L, and submit completed forms to MAAA@ercot.com. The prior DCAA form and DCAA@ercot.com mailbox should not be used for the 2026 audit cycle.

Once all corrections/changes have been made to the list, the MP is responsible for submitting to ERCOT signed MAAA forms for each MP registration type no later than October 1, 2026. Please use the form found in the ERCOT Protocols (Section 23, Form L) for verifying compliance with USA and MIS Access audit requirements under the ERCOT Protocols. Please further note that with respect to documents requiring a signature under the ERCOT Protocols, the Texas Uniform Electronic Transaction Act (TUETA) provides: "[i]f a law requires a signature, an electronic signature satisfies the law." Tex. Bus. & Com. Code section 322.007(d). This law only applies to transactions between parties that have both agreed to transact electronically. To satisfy a signature requirement under the Protocols (not otherwise requiring notarization), ERCOT has accepted, and will continue to accept, electronic signatures and scanned copies of documents containing wet signatures.

CONTACT: If you have any questions, please contact your ERCOT Account Manager. You may also call the general ERCOT Client Services phone number at (512) 248-3900 or contact ERCOT Client Services via email at ClientServices@ercot.com.

If you are receiving email from a public ERCOT distribution list that you no longer wish to receive, please follow this link in order to unsubscribe from this list: http://lists.ercot.com.

dg