The Responsible documented station(s), Entity developed physical security Transmission and implemented plan(s) that covers substation(s), and a documented its Transmission primary control physical security station(s), center(s) identified in plan(s) that Transmission Requirement R1 and covers its substation(s), and verified according to Transmission primary control Requirement R2. station(s), center(s) identified OR Transmission in Requirement R1 substation(s), and and verified The Responsible Entity primary control according to developed and center(s) Requirement R2 implemented a identified in but failed to documented physical Requirement R1 include three of security plan(s) that and verified Parts through covers its Transmission according to 5.4 in the plan. station(s), Requirement R2 Transmission but failed to substation(s), and include one of primary control Parts through center(s) identified in 5.4 in the plan. Requirement R1 and verified according to Requirement 2 but failed to include Parts 5.1 through 5.4 in the plan. R6. Each Transmission Owner that The Responsible The Responsible Entity had an The Responsible CIP-014-2 The Responsible identified a Transmission station, Entity had an unaffiliated third party review the Entity had an Entity failed to have Transmission substation, or unaffiliated third evaluation performed under unaffiliated third an unaffiliated third primary control center in party review the Requirement R4 and the security party review the party review the Requirement R1 and verified evaluation plan(s) developed under Requirement evaluation evaluation performed according to Requirement R2, performed under R5 but did so in more than 100 performed under under Requirement R4 and each Transmission Operator Requirement R4 calendar days but less than or equal Requirement R4 and the security notified by a Transmission and the security to 110 calendar days; and the security plan(s) developed Owner according to Requirement plan(s) plan(s) developed OR under Requirement R5 R3, shall have an unaffiliated developed under under Requirement
The Responsible Entity developed and implemented a documented physical security plan(s) that covers its Transmission station(s), Transmission substation(s), and primary control center(s) identified in Requirement R1 and verified according to Requirement R2 but failed to include one of Parts through 5.4 in the plan. documented physical security plan(s) that covers its Transmission station(s), Transmission substation(s), and primary control center(s) identified in Requirement R1 and verified according to Requirement R2 but failed to include three of Parts through 5.4 in the plan. station(s), Transmission substation(s), and primary control center(s) identified in Requirement R1 and verified according to Requirement R2. OR The Responsible Entity developed and implemented a documented physical security plan(s) that covers its Transmission station(s), Transmission substation(s), and primary control center(s) identified in Requirement R1 and verified according to Requirement 2 but failed to include Parts 5.1 through 5.4 in the plan. CIP-014-2 R6. Each Transmission Owner that identified a Transmission station, Transmission substation, or primary control center in Requirement R1 and verified according to Requirement R2, and each Transmission Operator notified by a Transmission Owner according to Requirement R3, shall have an unaffiliated The Responsible Entity had an unaffiliated third party review the evaluation performed under Requirement R4 and the security plan(s) developed under The Responsible Entity had an unaffiliated third party review the evaluation performed under Requirement R4 and the security plan(s) developed under Requirement R5 but did so in more than 100 calendar days but less than or equal to 110 calendar days; OR The Responsible Entity had an unaffiliated third party review the evaluation performed under Requirement R4 and the security plan(s) developed under Requirement The Responsible Entity failed to have an unaffiliated third party review the evaluation performed under Requirement R4 and the security plan(s) developed under Requirement R5
VSL_Matrix_Complete_2016_01_01.docx