Perimeter(s), all interconnected or more of the Critical and non-critical Cyber following: Electronic Assets within the Security Perimeter(s), interconnected Critical Electronic Security Perimeter(s), and noncritical Cyber all electronic access points to the Assets within the Electronic Security Electronic Security Perimeter(s) and the Cyber Perimeter(s), electronic access points to the Assets deployed for the access Electronic Security control and monitoring of these Perimeter(s) and Cyber access points. Assets deployed for the access control and monitoring of these access points. Electronic Access Controls — R2. N/A N/A N/A The Responsible Entity The Responsible Entity shall did not implement or implement and document the did not document the organizational organizational processes and processes and technical technical and procedural and procedural mechanisms for control of mechanisms for control electronic access at all electronic of electronic access at access points to the Electronic all electronic access Security Perimeter(s). points to the Electronic Security Perimeter(s). These processes and mechanisms R2.1. N/A N/A N/A The processes and shall use an access control model mechanisms did not that denies access use an access control model that denies by default, such that explicit access by default, such access permissions must be that explicit access specified. permissions must be specified. At all access points to the R2.2. N/A N/A N/A At one or more access Electronic Security Perimeter(s), points to the Electronic the Responsible Entity shall Security Perimeter(s),
Perimeter(s), all interconnected Critical and non-critical Cyber Assets within the Electronic Security Perimeter(s), all electronic access points to the Electronic Security Perimeter(s) and the Cyber Assets deployed for the access control and monitoring of these access points. or more of the following: Electronic Security Perimeter(s), interconnected Critical and noncritical Cyber Assets within the Electronic Security Perimeter(s), electronic access points to the Electronic Security Perimeter(s) and Cyber Assets deployed for the access control and monitoring of these access points. R2. Electronic Access Controls — The Responsible Entity shall implement and document the organizational processes and technical and procedural mechanisms for control of electronic access at all electronic access points to the Electronic Security Perimeter(s). N/A N/A N/A The Responsible Entity did not implement or did not document the organizational processes and technical and procedural mechanisms for control of electronic access at all electronic access points to the Electronic Security Perimeter(s). R2.1. These processes and mechanisms shall use an access control model that denies access by default, such that explicit access permissions must be specified. N/A N/A N/A The processes and mechanisms did not use an access control model that denies access by default, such that explicit access permissions must be specified. R2.2. At all access points to the Electronic Security Perimeter(s), the Responsible Entity shall N/A N/A N/A At one or more access points to the Electronic Security Perimeter(s),
VSL_Matrix_Complete_2016_01_01.docx