fewer high and For Responsible Entities with a total categorized at a OR medium impact of 100 or fewer high and medium lower category; For Responsible BES Cyber impact BES Cyber Systems, more OR Entities with more Systems, five or than five but less than or equal to 10 than a total of 100 high For Responsible fewer identified high or medium BES Cyber Systems and medium impact Entities with a BES Cyber have not been identified. BES Cyber Systems, total of 100 or Systems have not more than 15 percent of fewer high or been categorized high or medium impact medium impact or have been BES Cyber Systems and BES Cyber incorrectly have not been Assets, more than categorized at a identified; 10 but less than or lower category. equal to 15 OR OR identified BES For Responsible For Responsible Cyber Assets have Entities with a total of Entities with not been 100 or fewer high and more than a total categorized or medium impact BES of 100 high and have been Cyber Systems, more medium impact incorrectly than 15 high or BES Cyber categorized at a medium impact BES Systems, five lower category. Cyber Systems have percent or fewer OR not been identified. high or medium For Responsible BES Cyber Entities with more Systems have not than a total of 100 been identified; high and medium OR impact BES Cyber For Responsible Systems, more Entities with a than 10 percent but total of 100 or less than or equal fewer high and to 15 percent high medium impact or medium BES BES Cyber Cyber Systems Systems, five or have not been fewer high or identified; medium BES OR Cyber Systems For Responsible have not been Entities with a identified. total of 100 or
fewer high and medium impact BES Cyber Systems, five or fewer identified BES Cyber Systems have not been categorized or have been incorrectly categorized at a lower category. OR For Responsible Entities with more than a total of 100 high and medium impact BES Cyber Systems, five percent or fewer high or medium BES Cyber Systems have not been identified; OR For Responsible Entities with a total of 100 or fewer high and medium impact BES Cyber Systems, five or fewer high or medium BES Cyber Systems have not been identified. For Responsible Entities with a total of 100 or fewer high and medium impact BES Cyber Systems, more than five but less than or equal to 10 high or medium BES Cyber Systems have not been identified. categorized at a lower category; OR For Responsible Entities with a total of 100 or fewer high or medium impact and BES Cyber Assets, more than 10 but less than or equal to 15 identified BES Cyber Assets have not been categorized or have been incorrectly categorized at a lower category. OR For Responsible Entities with more than a total of 100 high and medium impact BES Cyber Systems, more than 10 percent but less than or equal to 15 percent high or medium BES Cyber Systems have not been identified; OR For Responsible Entities with a total of 100 or OR For Responsible Entities with more than a total of 100 high and medium impact BES Cyber Systems, more than 15 percent of high or medium impact BES Cyber Systems have not been identified; OR For Responsible Entities with a total of 100 or fewer high and medium impact BES Cyber Systems, more than 15 high or medium impact BES Cyber Systems have not been identified.
VSL_Matrix_Complete_2016_01_01.docx