The Responsible Entity shall R5.3. The Responsible Entity The Responsible Entity The Responsible Entity The Responsible Entity retain electronic access logs for retained electronic retained electronic access logs retained electronic access retained electronic at least ninety calendar days. access logs for 75 or for 60 or more calendar days, logs for 45 or more access logs for less Logs related to reportable more calendar days, but but for less than 75 calendar calendar days , but for than 45 calendar days. incidents shall be kept in for less than 90 days. less than 60 calendar accordance with the requirements calendar days. days. of Standard CIP-008-3. R1. Each Responsible Entity shall The Responsible Entity The Responsible Entity CIP-005-5 implement one or more did not have a method for did not document one documented processes that detecting malicious or more processes for collectively include each of the communications for both CIP-005-5 Table R1 – applicable requirement parts in inbound and outbound Electronic Security communications. (1.5) Perimeter. (R1) CIP-005-5 Table R1 Electronic – OR Security Perimeter. The Responsible Entity did not have all applicable Cyber Assets connected to a network via a protocol within a defined Electronic Security Perimeter (ESP). (1.1) OR External Routable Connectivity through the ESP was not through an identified EAP. (1.2) OR The Responsible Entity did not require inbound and outbound access permissions and deny all other access by default. (1.3) OR The Responsible Entity did not perform
R5.3. The Responsible Entity shall retain electronic access logs for at least ninety calendar days. Logs related to reportable incidents shall be kept in accordance with the requirements of Standard CIP-008-3. The Responsible Entity retained electronic access logs for 75 or more calendar days, but for less than 90 calendar days. The Responsible Entity retained electronic access logs for 60 or more calendar days, but for less than 75 calendar days. The Responsible Entity retained electronic access logs for 45 or more calendar days , but for less than 60 calendar days. The Responsible Entity retained electronic access logs for less than 45 calendar days. CIP-005-5 R1. Each Responsible Entity shall implement one or more documented processes that collectively include each of the applicable requirement parts in CIP-005-5 Table R1 – Electronic Security Perimeter. The Responsible Entity did not have a method for detecting malicious communications for both inbound and outbound communications. (1.5) The Responsible Entity did not document one or more processes for CIP-005-5 Table R1 – Electronic Security Perimeter. (R1) OR The Responsible Entity did not have all applicable Cyber Assets connected to a network via a protocol within a defined Electronic Security Perimeter (ESP). (1.1) OR External Routable Connectivity through the ESP was not through an identified EAP. (1.2) OR The Responsible Entity did not require inbound and outbound access permissions and deny all other access by default. (1.3) OR The Responsible Entity did not perform
VSL_Matrix_Complete_2016_01_27.docx