technically feasible, to support to cyber security, incident response as required in where technically Standard CIP-008-3. feasible, to support incident response as required in Standard CIP-008. The Responsible Entity shall R6.4. N/A N/A N/A The Responsible Entity retain all logs specified in did not retain one or Requirement R6 for ninety more of the logs calendar days. specified in Requirement R6 for at least 90 calendar days. The Responsible Entity shall R6.5. N/A N/A N/A The Responsible Entity review logs of system events did not review logs of related to cyber security and system events related maintain records documenting to cyber security nor review of logs. maintain records documenting review of logs. Disposal or Redeployment N/A N/A The Responsible Entity The Responsible Entity — R7. The Responsible Entity shall established did not establish and implement formal and implemented formal establish or implement methods, processes, and methods, formal procedures for disposal or redeployment of Cyber Assets processes, and procedures methods, processes, within the Electronic Security for and procedures for Perimeter(s) as identified and disposal or redeployment of Cyber documented in Standard Assets redeployment of Cyber Assets within the Electronic Security within the Electronic Security Perimeter(s) Perimeter(s) as identified as identified and and documented in documented in Standard 3 but Standard CIP-005-3. did not address redeployment as specified in R7.2.
technically feasible, to support incident response as required in Standard CIP-008-3. to cyber security, where technically feasible, to support incident response as required in Standard CIP-008. R6.4. The Responsible Entity shall retain all logs specified in Requirement R6 for ninety calendar days. N/A N/A N/A The Responsible Entity did not retain one or more of the logs specified in Requirement R6 for at least 90 calendar days. R6.5. The Responsible Entity shall review logs of system events related to cyber security and maintain records documenting review of logs. N/A N/A N/A The Responsible Entity did not review logs of system events related to cyber security nor maintain records documenting review of logs. R7. Disposal or Redeployment — The Responsible Entity shall establish and implement formal methods, processes, and procedures for disposal or redeployment of Cyber Assets within the Electronic Security Perimeter(s) as identified and documented in Standard N/A N/A The Responsible Entity established and implemented formal methods, processes, and procedures for redeployment of Cyber Assets within the Electronic Security Perimeter(s) as identified and documented in Standard 3 but did not address redeployment as specified in R7.2. The Responsible Entity did not establish or implement formal methods, processes, and procedures for disposal or redeployment of Cyber Assets within the Electronic Security Perimeter(s) as identified and documented in Standard CIP-005-3.
VSL_Matrix_Complete_2016_01_27.docx