Auditor Notes: R3 P3.1 Notes Summary RSAW Box The Notes Summary for Report R3 Part 3.2 CIP-007-6 Table R3 Malicious Code Prevention – Part Applicable Systems Requirements Measures 3.2 High Impact BES Cyber Systems and Mitigate the threat of detected Examples of evidence may include, but are their associated: malicious code. not limited to: EACMS; Records of response processes for PACS; and malicious code detection PCA Records of the performance of these processes when malicious Medium Impact BES Cyber Systems code is detected. and their associated: EACMS; PACS; and PCA Registered Entity Response (Required): Compliance Narrative: Provide a brief explanation, in your own words, of how you comply with this Requirement. References to supplied evidence, including links to the appropriate page, are recommended. Registered Entity Evidence (Required): The following information is requested for each document submitted as evidence. Also, evidence submitted should be highlighted and bookmarked, as appropriate, to identify the exact location where evidence of compliance may be found.
Auditor Notes: R3 P3.1 Notes Summary RSAW Box The Notes Summary for Report R3 Part 3.2 CIP-007-6 Table R3 – Malicious Code Prevention Part Applicable Systems Requirements Measures 3.2 High Impact BES Cyber Systems and their associated: EACMS; PACS; and PCA Medium Impact BES Cyber Systems and their associated: EACMS; PACS; and PCA Mitigate the threat of detected malicious code. Examples of evidence may include, but are not limited to: Records of response processes for malicious code detection Records of the performance of these processes when malicious code is detected. Registered Entity Response (Required): Compliance Narrative: Provide a brief explanation, in your own words, of how you comply with this Requirement. References to supplied evidence, including links to the appropriate page, are recommended. Registered Entity Evidence (Required): The following information is requested for each document submitted as evidence. Also, evidence submitted should be highlighted and bookmarked, as appropriate, to identify the exact location where evidence of compliance may be found.