assess or correct the deficiencies. Perimeter but did initial entry and last (2.3) not identify, exit dates and times of assess, or correct the visitor, the visitor’s OR deficiencies. (2.1) name, and the point of contact. (2.2) The Responsible Entity included a visitor control program to retain OR visitor logs for at least ninety days but did not identify, assess, or correct The Responsible Entity the deficiencies. (2.3) failed to include or implement a visitor control program to retain visitor logs for at least ninety days. (2.3) Each Responsible Entity shall CIP-006-5 R3. The Responsible The Responsible Entity has The Responsible The Responsible Entity implement one or more Entity has documented and implemented a Entity has has not documented documented Physical Access documented and maintenance and testing program for documented and and implemented a Control System maintenance and implemented a Physical Access Control Systems and implemented a maintenance and testing programs that collectively maintenance and locally mounted hardware or devices maintenance and testing program for include each of the applicable testing program at the Physical Security Perimeter, testing program Physical Access requirement parts in CIP-006-5 for Physical but did not complete required testing for Physical Control Systems and Table R3 Maintenance and – Access Control within 25 calendar months but did Access Control locally mounted Testing Program. Systems and complete required testing within 26 Systems and hardware or devices at locally mounted calendar months. (3.1) locally mounted the Physical Security hardware or hardware or Perimeter. (3.1) devices at the devices at the OR Physical Security Physical Security Perimeter, but Perimeter, but did The Responsible Entity did not complete not complete has documented and required testing required testing implemented a within 24 within 26 calendar maintenance and calendar months months but did testing program for but did complete complete required Physical Access required testing testing within 27 Control Systems and within 25 calendar months. locally mounted calendar months. (3.1) hardware or devices at (3.1) the Physical Security Perimeter, but did not complete required
assess or correct the deficiencies. (2.3) OR The Responsible Entity included a visitor control program to retain visitor logs for at least ninety days but did not identify, assess, or correct the deficiencies. (2.3) Perimeter but did not identify, assess, or correct deficiencies. (2.1) initial entry and last exit dates and times of the visitor, the visitor’s name, and the point of contact. (2.2) OR The Responsible Entity failed to include or implement a visitor control program to retain visitor logs for at least ninety days. (2.3) CIP-006-5 R3. Each Responsible Entity shall implement one or more documented Physical Access Control System maintenance and testing programs that collectively include each of the applicable requirement parts in CIP-006-5 Table R3 – Maintenance and Testing Program. The Responsible Entity has documented and implemented a maintenance and testing program for Physical Access Control Systems and locally mounted hardware or devices at the Physical Security Perimeter, but did not complete required testing within 24 calendar months but did complete required testing within 25 calendar months. (3.1) The Responsible Entity has documented and implemented a maintenance and testing program for Physical Access Control Systems and locally mounted hardware or devices at the Physical Security Perimeter, but did not complete required testing within 25 calendar months but did complete required testing within 26 calendar months. (3.1) The Responsible Entity has documented and implemented a maintenance and testing program for Physical Access Control Systems and locally mounted hardware or devices at the Physical Security Perimeter, but did not complete required testing within 26 calendar months but did complete required testing within 27 calendar months. (3.1) The Responsible Entity has not documented and implemented a maintenance and testing program for Physical Access Control Systems and locally mounted hardware or devices at the Physical Security Perimeter. (3.1) OR The Responsible Entity has documented and implemented a maintenance and testing program for Physical Access Control Systems and locally mounted hardware or devices at the Physical Security Perimeter, but did not complete required
VSL_Matrix_Complete_2016_01_01.docx