Electronic Security Perimeter. The security monitoring controls R6.2. N/A N/A N/A The Responsible shall issue automated or manual entity's security alerts for detected Cyber Security monitoring controls do Incidents. not issue automated or manual alerts for detected Cyber Security Incidents. The Responsible Entity shall R6.3. N/A N/A N/A The Responsible Entity maintain logs of system events did not maintain logs of related to cyber security, where system events related technically feasible, to support to cyber security, incident response as required in where technically Standard CIP-008-3. feasible, to support incident response as required in Standard CIP-008. The Responsible Entity shall R6.4. N/A N/A N/A The Responsible Entity retain all logs specified in did not retain one or Requirement R6 for ninety more of the logs calendar days. specified in Requirement R6 for at least 90 calendar days. The Responsible Entity shall R6.5. N/A N/A N/A The Responsible Entity review logs of system events did not review logs of related to cyber security and system events related maintain records documenting to cyber security nor review of logs. maintain records documenting review of logs. Disposal or Redeployment N/A N/A The Responsible The Responsible Entity — R7. The Responsible Entity shall Entity established did not establish and implement formal and implemented establish or implement methods, processes, and formal methods, formal procedures for disposal or redeployment of Cyber Assets
Electronic Security Perimeter. R6.2. The security monitoring controls shall issue automated or manual alerts for detected Cyber Security Incidents. N/A N/A N/A The Responsible entity's security monitoring controls do not issue automated or manual alerts for detected Cyber Security Incidents. R6.3. The Responsible Entity shall maintain logs of system events related to cyber security, where technically feasible, to support incident response as required in Standard CIP-008-3. N/A N/A N/A The Responsible Entity did not maintain logs of system events related to cyber security, where technically feasible, to support incident response as required in Standard CIP-008. R6.4. The Responsible Entity shall retain all logs specified in Requirement R6 for ninety calendar days. N/A N/A N/A The Responsible Entity did not retain one or more of the logs specified in Requirement R6 for at least 90 calendar days. R6.5. The Responsible Entity shall review logs of system events related to cyber security and maintain records documenting review of logs. N/A N/A N/A The Responsible Entity did not review logs of system events related to cyber security nor maintain records documenting review of logs. R7. Disposal or Redeployment — The Responsible Entity shall establish and implement formal methods, processes, and procedures for disposal or redeployment of Cyber Assets N/A N/A The Responsible Entity established and implemented formal methods, The Responsible Entity did not establish or implement formal
VSL_Matrix_Complete_2016_01_01.docx