The Responsible Entity has implemented a BES Cyber System Information protection program which includes one or more procedures for protection and secure handling BES Cyber System Information but did not identify, assess, or correct the deficiencies. (1.2) R2. Each Responsible Entity shall CIP-011-1 N/A The Responsible Entity The Responsible Entity The Responsible Entity implement one or more implemented one or more implemented one or more has not documented or documented processes that documented processes but did documented processes but implemented any collectively include the not include processes for reuse did not include disposal or processes for applicable requirement parts in as to prevent the unauthorized media destruction applicable requirement CIP‐011‐1 Table R2 BES – retrieval of BES Cyber System processes to prevent the parts in CIP-011-1 Cyber Asset Reuse and Disposal. Information from the BES unauthorized retrieval of Table R2 BES Cyber – Cyber Asset. (2.1) BES Cyber System Asset Reuse and Information from the BES Disposal. (R2) Cyber Asset. (2.2) R1. Each Responsible Entity shall CIP-011-2 N/A N/A N/A The Responsible implement one or more Entity has not documented information documented or protection program(s) that implemented a BES collectively includes each of the Cyber System applicable requirement parts in Information protection CIP-011-2 Table R1 – program (R1). Information Protection. [See Table R1 of standard]
The Responsible Entity has implemented a BES Cyber System Information protection program which includes one or more procedures for protection and secure handling BES Cyber System Information but did not identify, assess, or correct the deficiencies. (1.2) CIP-011-1 R2. Each Responsible Entity shall implement one or more documented processes that collectively include the applicable requirement parts in CIP‐011‐1 Table R2 – BES Cyber Asset Reuse and Disposal. N/A The Responsible Entity implemented one or more documented processes but did not include processes for reuse as to prevent the unauthorized retrieval of BES Cyber System Information from the BES Cyber Asset. (2.1) The Responsible Entity implemented one or more documented processes but did not include disposal or media destruction processes to prevent the unauthorized retrieval of BES Cyber System Information from the BES Cyber Asset. (2.2) The Responsible Entity has not documented or implemented any processes for applicable requirement parts in CIP-011-1 Table R2 – BES Cyber Asset Reuse and Disposal. (R2) CIP-011-2 R1. Each Responsible Entity shall implement one or more documented information protection program(s) that collectively includes each of the applicable requirement parts in CIP-011-2 Table R1 – Information Protection. [See Table R1 of standard] N/A N/A N/A The Responsible Entity has not documented or implemented a BES Cyber System Information protection program (R1).
VSL_Matrix_Complete_2016_01_27.docx