missed an interval and events described in 4.2.1 events for the completed the review through 4.2.2. (4.2) Applicable Systems within 22 calendar days (per device or system OR of the prior review. capability) but did not (4.4) detect and log all of the The Responsible Entity required types of has documented and events described in implemented one or more process(es) to log 4.1.1 through 4.1.3. (4.1) applicable events identified in 4.1 (where technically feasible and except during CIP Exceptional Circumstances) but did not retain applicable event logs for at least the last 90 consecutive days. (4.3) OR The Responsible Entity has documented and implemented one or more process(es) to identify undetected Cyber Security Incidents by reviewing an entity-determined summarization or sampling of logged events at least every 15 calendar days but missed two or more intervals. (4.4) Each Responsible Entity shall CIP-007-6 R5. The Responsible Entity The Responsible Entity has The Responsible Entity The Responsible Entity implement one or more has implemented one or implemented one or more has implemented one or did not implement or documented process(es) that more documented documented process(es) for more documented document one or more collectively include each of the process(es) for password-only authentication process(es) for System process(es) that applicable requirement parts in password-only for interactive user access but Access Controls but, did included the applicable CIP-007-6 Table R5 System – authentication for did not technically or not include the Access Controls. interactive user access procedurally enforce password identification or inventory
missed an interval and completed the review within 22 calendar days of the prior review. (4.4) events described in 4.2.1 through 4.2.2. (4.2) OR The Responsible Entity has documented and implemented one or more process(es) to log applicable events identified in 4.1 (where technically feasible and except during CIP Exceptional Circumstances) but did not retain applicable event logs for at least the last 90 consecutive days. (4.3) OR The Responsible Entity has documented and implemented one or more process(es) to identify undetected Cyber Security Incidents by reviewing an entity-determined summarization or sampling of logged events at least every 15 calendar days but missed two or more intervals. (4.4) events for the Applicable Systems (per device or system capability) but did not detect and log all of the required types of events described in 4.1.1 through 4.1.3. (4.1) CIP-007-6 R5. Each Responsible Entity shall implement one or more documented process(es) that collectively include each of the applicable requirement parts in CIP-007-6 Table R5 – System Access Controls. The Responsible Entity has implemented one or more documented process(es) for password-only authentication for interactive user access The Responsible Entity has implemented one or more documented process(es) for password-only authentication for interactive user access but did not technically or procedurally enforce password The Responsible Entity has implemented one or more documented process(es) for System Access Controls but, did not include the identification or inventory The Responsible Entity did not implement or document one or more process(es) that included the applicable
VSL_Matrix_Complete_2016_01_27.docx