The following information is requested for each document submitted as evidence. Also, evidence submitted should be highlighted and bookmarked, as appropriate, to identify the exact location where evidence of compliance may be found. File Name Document Title Revision Document Relevant Description of Applicability or Date Page(s) of Document Version or Section(s) Team Evidence Reviewed (This section to be completed by the Compliance Monitor Administrator): Compliance Assessment Approach Specific to Part 1.2 This section to be completed by the Compliance Monitor Administrator Verify the Responsible Entity documented one or more processes to authorize and document changes that deviate from the existing baseline configuration. For each Applicable System, verify the Responsible Entity authorized and documented changes that deviate from the existing baseline configuration. CIP-010-2 Table R1 Configuration Change Management – Part Applicable Systems Requirements Measures 1.3 High Impact BES Cyber For a change that deviates An example of evidence may Systems and their associated: from the existing baseline include, but is not limited to, updated EACMS; configuration, update the baseline documentation with a date baseline configuration as that is within 30 calendar days of the PACS; and necessary within 30 calendar date of the completion of the PCA days of completing the change. Medium Impact BES Cyber change. Systems and their associated: PACS; and PCA Registered Entity Response (Required): Describe, in narrative form, how you meet compliance with this requirement. Registered Entity Evidence (Required):
The following information is requested for each document submitted as evidence. Also, evidence submitted should be highlighted and bookmarked, as appropriate, to identify the exact location where evidence of compliance may be found. File Name Document Title Revision or Version Document Date Relevant Page(s) or Section(s) Description of Applicability of Document Team Evidence Reviewed (This section to be completed by the Compliance Monitor Administrator): Compliance Assessment Approach Specific to Part 1.2 This section to be completed by the Compliance Monitor Administrator Verify the Responsible Entity documented one or more processes to authorize and document changes that deviate from the existing baseline configuration. For each Applicable System, verify the Responsible Entity authorized and documented changes that deviate from the existing baseline configuration. CIP-010-2 Table R1 – Configuration Change Management Part Applicable Systems Requirements Measures 1.3 High Impact BES Cyber Systems and their associated: EACMS; PACS; and PCA Medium Impact BES Cyber Systems and their associated: PACS; and PCA For a change that deviates from the existing baseline configuration, update the baseline configuration as necessary within 30 calendar days of completing the change. An example of evidence may include, but is not limited to, updated baseline documentation with a date that is within 30 calendar days of the date of the completion of the change. Registered Entity Response (Required): Describe, in narrative form, how you meet compliance with this requirement. Registered Entity Evidence (Required):
RSAW%20CIP-010-2_BC.docx