data request issued pursuant to 90 calendar days but following completion of than or equal to 120 120 calendar days Requirement R1. less than or equal to 100 Requirement R1; calendar days following following completion calendar days following completion of of Requirement R1; Or completion of Requirement R1; OR Requirement R1; The Transmission Owner had OR an unaffiliated third party The Transmission OR verify the risk assessment The Transmission Owner Owner failed to have The Transmission performed under Requirement had an unaffiliated third an unaffiliated third Owner had an R1 and modified or party verify the risk party verify the risk unaffiliated third party documented the technical basis assessment performed assessment performed verify the risk for not modifying its under Requirement R1 under Requirement R1; assessment performed identification under and modified or OR under Requirement R1 Requirement R1 as required by documented the technical and modified or Part 2.3 but did so more than 70 basis for not modifying its The Transmission documented the calendar days and less than or identification under Owner had an technical basis for not equal to 80 calendar days from Requirement R1 as unaffiliated third party modifying its completion of the third party required by Part 2.3 but verify the risk identification under verification. did so more than 80 assessment performed Requirement R1 as calendar days from under Requirement R1 required by Part 2.3 but completion of the third but failed to implement did so more than 60 party verification; procedures for calendar days and less protecting information OR than or equal to 70 per Part 2.4. calendar days from The Transmission Owner completion of the third had an unaffiliated third party verification. party verify the risk assessment performed under Requirement R1 but failed to modify or document the technical basis for not modifying its identification under R1 as required by Part 2.3. R3. For a primary control center(s) The Transmission Owner The Transmission Owner The Transmission CIP-014-2 The Transmission identified by the Transmission notified the Transmission notified the Transmission Owner notified the Owner notified the Owner according to Requirement Operator that operates the Operator that operates the Transmission Operator Transmission Operator R1, Part 1.2 that a) operationally primary control center as primary control center as that operates the
data request issued pursuant to Requirement R1. 90 calendar days but less than or equal to 100 calendar days following completion of Requirement R1; OR The Transmission Owner had an unaffiliated third party verify the risk assessment performed under Requirement R1 and modified or documented the technical basis for not modifying its identification under Requirement R1 as required by Part 2.3 but did so more than 60 calendar days and less than or equal to 70 calendar days from completion of the third party verification. following completion of Requirement R1; Or The Transmission Owner had an unaffiliated third party verify the risk assessment performed under Requirement R1 and modified or documented the technical basis for not modifying its identification under Requirement R1 as required by Part 2.3 but did so more than 70 calendar days and less than or equal to 80 calendar days from completion of the third party verification. than or equal to 120 calendar days following completion of Requirement R1; OR The Transmission Owner had an unaffiliated third party verify the risk assessment performed under Requirement R1 and modified or documented the technical basis for not modifying its identification under Requirement R1 as required by Part 2.3 but did so more than 80 calendar days from completion of the third party verification; OR The Transmission Owner had an unaffiliated third party verify the risk assessment performed under Requirement R1 but failed to modify or document the technical basis for not modifying its identification under R1 as required by Part 2.3. 120 calendar days following completion of Requirement R1; OR The Transmission Owner failed to have an unaffiliated third party verify the risk assessment performed under Requirement R1; OR The Transmission Owner had an unaffiliated third party verify the risk assessment performed under Requirement R1 but failed to implement procedures for protecting information per Part 2.4. CIP-014-2 R3. For a primary control center(s) identified by the Transmission Owner according to Requirement R1, Part 1.2 that a) operationally The Transmission Owner notified the Transmission Operator The Transmission Owner notified the Transmission Operator that operates the primary control center as The Transmission Owner notified the Transmission Operator that operates the primary control center as The Transmission Owner notified the Transmission Operator that operates the
VSL_Matrix_Complete_2016_01_27.docx