CIP Exceptional unescorted physical access. Circumstances) prior to Parts 2.1.1 through Circumstances) prior to (2.2) their being granted 2.1.9. (2.1) their being granted authorized electronic and OR OR authorized electronic authorized unescorted and authorized physical access. (2.2) The Responsible Entity The Responsible Entity unescorted physical implemented a cyber security implemented a cyber OR access. (2.2) training program but failed to security training train two individuals with The Responsible Entity program but failed to OR authorized electronic or implemented a cyber train four or more The Responsible Entity authorized unescorted physical security training program individuals (with the implemented a cyber access within 15 calendar but failed to train three exception of CIP security training months of the previous training individuals with Exceptional program but failed to completion date. (2.3) authorized electronic or Circumstances) prior to train one individual authorized unescorted their being granted with authorized physical access within 15 authorized electronic electronic or authorized calendar months of the and authorized unescorted physical previous training unescorted physical access within 15 completion date. (2.3) access. (2.2) calendar months of the OR previous training completion date. (2.3) The Responsible Entity implemented a cyber security training program but failed to train four or more individuals with authorized electronic or authorized unescorted physical access within 15 calendar months of the previous training completion date. (2.3) Each Responsible Entity shall CIP-004-6 R3. The Responsible Entity The Responsible Entity has a The Responsible Entity The Responsible Entity implement one or more has a program for program for conducting has a program for did not have all of the documented personnel risk conducting Personnel Personnel Risk Assessments conducting Personnel required elements as assessment program(s) to attain Risk Assessments (PRAs) for individuals, Risk Assessments (PRAs) described by 3.1 and retain authorized electronic (PRAs) for individuals, including contractors and for individuals, including through 3.4 included or authorized unescorted physical including contractors service vendors, but did not contractors and service within documented access to BES Cyber Systems
CIP Exceptional Circumstances) prior to their being granted authorized electronic and authorized unescorted physical access. (2.2) OR The Responsible Entity implemented a cyber security training program but failed to train one individual with authorized electronic or authorized unescorted physical access within 15 calendar months of the previous training completion date. (2.3) unescorted physical access. (2.2) OR The Responsible Entity implemented a cyber security training program but failed to train two individuals with authorized electronic or authorized unescorted physical access within 15 calendar months of the previous training completion date. (2.3) Circumstances) prior to their being granted authorized electronic and authorized unescorted physical access. (2.2) OR The Responsible Entity implemented a cyber security training program but failed to train three individuals with authorized electronic or authorized unescorted physical access within 15 calendar months of the previous training completion date. (2.3) Parts 2.1.1 through 2.1.9. (2.1) OR The Responsible Entity implemented a cyber security training program but failed to train four or more individuals (with the exception of CIP Exceptional Circumstances) prior to their being granted authorized electronic and authorized unescorted physical access. (2.2) OR The Responsible Entity implemented a cyber security training program but failed to train four or more individuals with authorized electronic or authorized unescorted physical access within 15 calendar months of the previous training completion date. (2.3) CIP-004-6 R3. Each Responsible Entity shall implement one or more documented personnel risk assessment program(s) to attain and retain authorized electronic or authorized unescorted physical access to BES Cyber Systems The Responsible Entity has a program for conducting Personnel Risk Assessments (PRAs) for individuals, including contractors The Responsible Entity has a program for conducting Personnel Risk Assessments (PRAs) for individuals, including contractors and service vendors, but did not The Responsible Entity has a program for conducting Personnel Risk Assessments (PRAs) for individuals, including contractors and service The Responsible Entity did not have all of the required elements as described by 3.1 through 3.4 included within documented
VSL_Matrix_Complete_2016_01_27.docx