Req. Finding Summary & Documentation Functions Monitored BA, GO, GOP, TO, R1. TOP, LSE, TSP BA, GO, GOP, TO, R2. TOP, LSE, TSP BA, GO, GOP, TO, R3. TOP, LSE, TSP BA, GO, GOP, TO, R4. TOP, LSE, TSP BA, GO, GOP, TO, R5. TOP, LSE, TSP BA, GO, GOP, TO, R6. TOP, LSE, TSP Req. Recommendations Req. Areas of Concern Subject Matter Experts Identify subject matter expert(s) responsible for this Reliability Standard. Insert additional lines if necessary. Registered Entity Response (Required): SME Name Title Organization Requirement(s) R1 Supporting Evidence and Documentation R1. Cyber Security Policy The Responsible Entity shall document and implement a cyber — security policy that represents management’s commitment and ability to secure its Critical Cyber Assets. The Responsible Entity shall, at minimum, ensure the following: The cyber R1.1. security policy addresses the requirements in Standards CIP-002-3 through CIP-009-3, including provision for emergency situations. The cyber R1.2. security policy is readily available to all personnel who have access to, or are responsible for, Critical Cyber Assets. Annual R1.3. review and approval of the cyber security policy by the senior manager assigned pursuant to R2. Registered Entity Response (Required):
Req. Finding Summary & Documentation Functions Monitored R1. BA, GO, GOP, TO, TOP, LSE, TSP R2. BA, GO, GOP, TO, TOP, LSE, TSP R3. BA, GO, GOP, TO, TOP, LSE, TSP R4. BA, GO, GOP, TO, TOP, LSE, TSP R5. BA, GO, GOP, TO, TOP, LSE, TSP R6. BA, GO, GOP, TO, TOP, LSE, TSP Req. Recommendations Req. Areas of Concern Subject Matter Experts Identify subject matter expert(s) responsible for this Reliability Standard. Insert additional lines if necessary. Registered Entity Response (Required): SME Name Title Organization Requirement(s) R1 Supporting Evidence and Documentation R1. Cyber Security Policy — The Responsible Entity shall document and implement a cyber security policy that represents management’s commitment and ability to secure its Critical Cyber Assets. The Responsible Entity shall, at minimum, ensure the following: R1.1. The cyber security policy addresses the requirements in Standards CIP-002-3 through CIP-009-3, including provision for emergency situations. R1.2. The cyber security policy is readily available to all personnel who have access to, or are responsible for, Critical Cyber Assets. R1.3. Annual review and approval of the cyber security policy by the senior manager assigned pursuant to R2. Registered Entity Response (Required):
RSAW%20CIP-003-3_BC.docx