The following information is requested for each document submitted as evidence. Also, evidence submitted should be highlighted and bookmarked, as appropriate, to identify the exact location where evidence of compliance may be found. Relevant Revision Page(s) Description of or Document or Applicability of File Name Document Title Version Date Section(s) Document Audit Team Evidence Reviewed (This section to be completed by the Compliance Enforcement Authority): Compliance Assessment Approach Specific to CIP-005-5, R1, Part 1.5 This section to be completed by the Compliance Enforcement Authority Verify the Responsible Entity has documented one or more processes which include one or more methods for detecting known or suspected malicious communications for both inbound and outbound communications. For each Applicable System, verify the Responsible Entity has implemented one or more methods for detecting known or suspected malicious communications for both inbound and outbound communications. Auditor Notes: R2 Supporting Evidence and Documentation Each Responsible Entity allowing Interactive Remote Access to BES Systems shall implement one R2. or more documented processes that collectively include the applicable requirement parts, where technically feasible, in CIP-005-5 Table R2 Interactive Remote Access Management. [Violation Risk – Factor: Medium] [Time Horizon: Operations Planning and Same Day Operations]. M2. Evidence must include the documented processes that collectively address each of the applicable requirement parts in CIP-005-5 Table R2 Interactive Remote Access Management and additional – evidence to demonstrate implementation as described in the Measures column of the table. R2 Part 2.1 CIP-005-5 Table R2 Interactive Remote Access Management – Part Applicable Systems Requirements Measures
The following information is requested for each document submitted as evidence. Also, evidence submitted should be highlighted and bookmarked, as appropriate, to identify the exact location where evidence of compliance may be found. File Name Document Title Revision or Version Document Date Relevant Page(s) or Section(s) Description of Applicability of Document Audit Team Evidence Reviewed (This section to be completed by the Compliance Enforcement Authority): Compliance Assessment Approach Specific to CIP-005-5, R1, Part 1.5 This section to be completed by the Compliance Enforcement Authority Verify the Responsible Entity has documented one or more processes which include one or more methods for detecting known or suspected malicious communications for both inbound and outbound communications. For each Applicable System, verify the Responsible Entity has implemented one or more methods for detecting known or suspected malicious communications for both inbound and outbound communications. Auditor Notes: R2 Supporting Evidence and Documentation R2. Each Responsible Entity allowing Interactive Remote Access to BES Systems shall implement one or more documented processes that collectively include the applicable requirement parts, where technically feasible, in CIP-005-5 Table R2 – Interactive Remote Access Management. [Violation Risk Factor: Medium] [Time Horizon: Operations Planning and Same Day Operations]. M2. Evidence must include the documented processes that collectively address each of the applicable requirement parts in CIP-005-5 Table R2 – Interactive Remote Access Management and additional evidence to demonstrate implementation as described in the Measures column of the table. R2 Part 2.1 CIP-005-5 Table R2 – Interactive Remote Access Management Part Applicable Systems Requirements Measures
RSAW%20CIP-005-5_2015_v1.docx