the deficiencies. method(s) to deter, (3.3) detect, or prevent malicious code and has identified deficiencies but did not assess or correct the deficiencies. (3.1) OR The Responsible Entity has implemented one or more documented process(es) for malicious code prevention but did not deploy method(s) to deter, detect, or prevent malicious code and did not identify, assess, or correct the deficiencies. (3.1) Each Responsible Entity shall CIP-007-5 R4. The Responsible The Responsible Entity has The Responsible The Responsible Entity implement, in a manner that Entity has documented and implemented one or Entity has did not implement or identifies, assesses, and corrects documented and more process(es) to identify documented and document one or more deficiencies, one or more implemented one undetected Cyber Security Incidents implemented one process(es) that documented processes that or more by reviewing an entity-determined or more included the applicable collectively include each of the process(es) to summarization or sampling of logged process(es) to items in CIP-007-5 applicable requirement parts in identify events at least every 15 calendar days generate alerts for Table R4 and has CIP-007-5 Table R4 Security – undetected Cyber but missed an interval and completed necessary security identified deficiencies Event Monitoring. Security the review within 30 calendar days of events (as but did not assess or Incidents by the prior review and has identified determined by the correct the deficiencies. reviewing an deficiencies but did not assess or responsible entity) (R4) correct the deficiencies. (4.4) for the Applicable
the deficiencies. (3.3) method(s) to deter, detect, or prevent malicious code and has identified deficiencies but did not assess or correct the deficiencies. (3.1) OR The Responsible Entity has implemented one or more documented process(es) for malicious code prevention but did not deploy method(s) to deter, detect, or prevent malicious code and did not identify, assess, or correct the deficiencies. (3.1) CIP-007-5 R4. Each Responsible Entity shall implement, in a manner that identifies, assesses, and corrects deficiencies, one or more documented processes that collectively include each of the applicable requirement parts in CIP-007-5 Table R4 – Security Event Monitoring. The Responsible Entity has documented and implemented one or more process(es) to identify undetected Cyber Security Incidents by reviewing an The Responsible Entity has documented and implemented one or more process(es) to identify undetected Cyber Security Incidents by reviewing an entity-determined summarization or sampling of logged events at least every 15 calendar days but missed an interval and completed the review within 30 calendar days of the prior review and has identified deficiencies but did not assess or correct the deficiencies. (4.4) The Responsible Entity has documented and implemented one or more process(es) to generate alerts for necessary security events (as determined by the responsible entity) for the Applicable The Responsible Entity did not implement or document one or more process(es) that included the applicable items in CIP-007-5 Table R4 and has identified deficiencies but did not assess or correct the deficiencies. (R4)
VSL_Matrix_Complete_2016_01_01.docx