Part 3.2 in AR3 Part 3.2 Please Verify the Responsible Entity has documented provide: one or more processes that mitigate the threat Table R3 Malicious Code Prevention – of detected malicious code. Applicable Systems One or more High Impact BES cyber systems and their associated: documented processes electronic access control or monitoring pertaining to systems; requirement R3 Part physical access control systems; and 3.2. protected assets Medium Impact BES systems and their associated: electronic access control or monitoring systems; physical access control systems; and protected cyber assets Requirements For each instance of detected malicious code, Evidence that the Mitigate the threat of detected malicious code. verify the threat of the malicious code was processes pertaining to mitigated. requirement R3 Part 3.2 have been implemented; including Measures a list of all instances of Examples of evidence may include, but are not limited to: detected malicious records of response processes for malicious code code. detection records of the performance of these processes when malicious code is detected.
Part 3.2 in Table R3 – Malicious Code Prevention Applicable Systems High Impact BES cyber systems and their associated: electronic access control or monitoring systems; physical access control systems; and protected assets Medium Impact BES systems and their associated: electronic access control or monitoring systems; physical access control systems; and protected cyber assets Requirements Mitigate the threat of detected malicious code. Measures Examples of evidence may include, but are not limited to: records of response processes for malicious code detection records of the performance of these processes when malicious code is detected. AR3 Part 3.2 Please provide: One or more documented processes pertaining to requirement R3 Part 3.2. Verify the Responsible Entity has documented one or more processes that mitigate the threat of detected malicious code. Evidence that the processes pertaining to requirement R3 Part 3.2 have been implemented; including a list of all instances of detected malicious code. For each instance of detected malicious code, verify the threat of the malicious code was mitigated.