2.4 High Impact BES Cyber Systems and For each mitigation plan created or An example of evidence may include, but is their associated: revised in Part 2.3, implement the not limited to, records of implementation of plan within the timeframe specified mitigations. EACMS; in the plan, unless a revision to the PACS; and plan or an extension to the PCA timeframe specified in Part 2.3 is Medium Impact BES Cyber Systems approved by the CIP Senior Manager and their associated: or delegate. EACMS; PACS; and PCA Registered Entity Response (Required): Compliance Narrative: Provide a brief explanation, in your own words, of how you comply with this Requirement. References to supplied evidence, including links to the appropriate page, are recommended. Registered Entity Evidence (Required): The following information is requested for each document submitted as evidence. Also, evidence submitted should be highlighted and bookmarked, as appropriate, to identify the exact location where evidence of compliance may be found. Relevant Revision Page(s) Description of or Document or Applicability of File Name Document Title Version Date Section(s) Document Team Evidence Reviewed (This section to be completed by the Compliance Enforcement Authority): Compliance Assessment Approach Specific to CIP-007-6, R2, Part 2.4 This section to be completed by the Compliance Enforcement Authority Verify the Responsible Entity has documented one or more processes that, for each mitigation plan created or revised in Part 2.3, require implementation of the plan within the timeframe specified in the plan, unless a revision to the plan or an extension to the timeframe specified in Part 2.3 is approved by the CIP Senior Manager or delegate. For each completed mitigation plan: Verify the mitigation plan was completed by implementing all provisions of the mitigation
2.4 High Impact BES Cyber Systems and their associated: EACMS; PACS; and PCA Medium Impact BES Cyber Systems and their associated: EACMS; PACS; and PCA For each mitigation plan created or revised in Part 2.3, implement the plan within the timeframe specified in the plan, unless a revision to the plan or an extension to the timeframe specified in Part 2.3 is approved by the CIP Senior Manager or delegate. An example of evidence may include, but is not limited to, records of implementation of mitigations. Registered Entity Response (Required): Compliance Narrative: Provide a brief explanation, in your own words, of how you comply with this Requirement. References to supplied evidence, including links to the appropriate page, are recommended. Registered Entity Evidence (Required): The following information is requested for each document submitted as evidence. Also, evidence submitted should be highlighted and bookmarked, as appropriate, to identify the exact location where evidence of compliance may be found. File Name Document Title Revision or Version Document Date Relevant Page(s) or Section(s) Description of Applicability of Document Team Evidence Reviewed (This section to be completed by the Compliance Enforcement Authority): Compliance Assessment Approach Specific to CIP-007-6, R2, Part 2.4 This section to be completed by the Compliance Enforcement Authority Verify the Responsible Entity has documented one or more processes that, for each mitigation plan created or revised in Part 2.3, require implementation of the plan within the timeframe specified in the plan, unless a revision to the plan or an extension to the timeframe specified in Part 2.3 is approved by the CIP Senior Manager or delegate. For each completed mitigation plan: Verify the mitigation plan was completed by implementing all provisions of the mitigation
RSAW%20CIP-007-6_2015_v1.docx