within 90 calendar days of any of the following changes that the responsible entity determines would impact the ability to execute the plan: (3.2) Roles or responsibilities, or Responders, or Technology changes. R1. Each Responsible Entity shall CIP-010-1 The Responsible The Responsible Entity has The Responsible The Responsible Entity implement, in a manner that Entity has documented and implemented a Entity has has not documented or identifies, assesses, and corrects documented and configuration change management documented and implemented any deficiencies, one or more implemented a process(es) that includes only three of implemented a configuration change documented processes that configuration the required baseline items listed in configuration management collectively include each of the change 1.1.1 through 1.1.5. (1.1) change process(es). (R1) applicable requirement parts in management management OR OR CIP‐010‐1 Table R1 – process(es) that process(es) that Configuration Change includes only includes only two The Responsible Entity has The Responsible Entity Management. four of the of the required documented and implemented a has documented and required baseline baseline items configuration change management implemented a items listed in listed in 1.1.1 process(es) that includes four of the configuration change 1.1.1 through through 1.1.5. required baseline items listed in 1.1.1 management 1.1.5. (1.1) (1.1) through 1.1.5 and identified process(es) that deficiencies but did not assess and includes only one of OR OR correct the deficiencies. (1.1) the required baseline The Responsible The Responsible items listed in 1.1.1 OR Entity has Entity has through 1.1.5. (1.1) documented and documented and The Responsible Entity has OR implemented a documented and implemented a implemented a configuration configuration configuration change management The Responsible Entity change change process(es) that includes four of the has documented and
within 90 calendar days of any of the following changes that the responsible entity determines would impact the ability to execute the plan: (3.2) Roles or responsibilities, or Responders, or Technology changes. CIP-010-1 R1. Each Responsible Entity shall implement, in a manner that identifies, assesses, and corrects deficiencies, one or more documented processes that collectively include each of the applicable requirement parts in CIP‐010‐1 Table R1 – Configuration Change Management. The Responsible Entity has documented and implemented a configuration change management process(es) that includes only four of the required baseline items listed in 1.1.1 through 1.1.5. (1.1) OR The Responsible Entity has documented and implemented a configuration change The Responsible Entity has documented and implemented a configuration change management process(es) that includes only three of the required baseline items listed in 1.1.1 through 1.1.5. (1.1) OR The Responsible Entity has documented and implemented a configuration change management process(es) that includes four of the required baseline items listed in 1.1.1 through 1.1.5 and identified deficiencies but did not assess and correct the deficiencies. (1.1) OR The Responsible Entity has documented and implemented a configuration change management process(es) that includes four of the The Responsible Entity has documented and implemented a configuration change management process(es) that includes only two of the required baseline items listed in 1.1.1 through 1.1.5. (1.1) OR The Responsible Entity has documented and implemented a configuration change The Responsible Entity has not documented or implemented any configuration change management process(es). (R1) OR The Responsible Entity has documented and implemented a configuration change management process(es) that includes only one of the required baseline items listed in 1.1.1 through 1.1.5. (1.1) OR The Responsible Entity has documented and
VSL_Matrix_Complete_2016_01_01.docx