Complete Violation Severity Level Matrix (CIP) Encompassing All Commission-Approved Reliability Standards Standard Requirement Text of Requirement Lower VSL Moderate VSL High VSL Severe VSL Number Number Critical Asset Identification CIP-002-3 R1. N/A N/A N/A The responsible entity Method The Responsible — has not documented a Entity shall identify and risk-based assessment document a risk-based methodology to use to assessment methodology to use identify its Critical to identify its Critical Assets. Assets as specified in R1. The Responsible Entity shall CIP-002-3 R1.1 N/A The Responsible Entity The Responsible Entity The Responsible Entity maintain documentation maintained documentation maintained did not maintain describing its risk-based describing its risk-based documentation describing documentation assessment methodology that assessment methodology which its risk-based assessment describing its includes procedures and includes evaluation criteria, but methodology that includes based assessment evaluation criteria. does not include procedures. procedures but does not methodology that include evaluation includes procedures criteria. and evaluation criteria. CIP-002-3 R1.2 The risk-based assessment shall N/A N/A N/A The Responsible Entity consider the following assets: did not consider all of the asset types listed in R1.2.1 through R1.2.7 in its risk-based assessment. Control centers and backup CIP-002-3 R1.2.1. N/A N/A N/A N/A control centers performing the functions of the entities listed in the Applicability section of this standard. Transmission substations that CIP-002-3 R1.2.2. N/A N/A N/A N/A support the reliable operation of the Bulk Electric System. Generation resources that support CIP-002-3 R1.2.3. N/A N/A N/A N/A the reliable operation of the Bulk Electric System. Systems and facilities critical to CIP-002-3 R1.2.4. N/A N/A N/A N/A system restoration, including
Complete Violation Severity Level Matrix (CIP) Encompassing All Commission-Approved Reliability Standards Standard Number Requirement Number Text of Requirement Lower VSL Moderate VSL High VSL Severe VSL CIP-002-3 R1. Critical Asset Identification Method — The Responsible Entity shall identify and document a risk-based assessment methodology to use to identify its Critical Assets. N/A N/A N/A The responsible entity has not documented a risk-based assessment methodology to use to identify its Critical Assets as specified in R1. CIP-002-3 R1.1 The Responsible Entity shall maintain documentation describing its risk-based assessment methodology that includes procedures and evaluation criteria. N/A The Responsible Entity maintained documentation describing its risk-based assessment methodology which includes evaluation criteria, but does not include procedures. The Responsible Entity maintained documentation describing its risk-based assessment methodology that includes procedures but does not include evaluation criteria. The Responsible Entity did not maintain documentation describing its assessment methodology that includes procedures and evaluation criteria. CIP-002-3 R1.2 The risk-based assessment shall consider the following assets: N/A N/A N/A The Responsible Entity did not consider all of the asset types listed in R1.2.1 through R1.2.7 in its risk-based assessment. CIP-002-3 R1.2.1. Control centers and backup control centers performing the functions of the entities listed in the Applicability section of this standard. N/A N/A N/A N/A CIP-002-3 R1.2.2. Transmission substations that support the reliable operation of the Bulk Electric System. N/A N/A N/A N/A CIP-002-3 R1.2.3. Generation resources that support the reliable operation of the Bulk Electric System. N/A N/A N/A N/A CIP-002-3 R1.2.4. Systems and facilities critical to system restoration, including N/A N/A N/A N/A based
VSL_Matrix_Complete_2016_01_27.docx