the primary control center of the removal from the identification in Requirement R1. R4. Each Transmission Owner that The Responsible Entity The Responsible Entity The Responsible Entity CIP-014-2 N/A identified a Transmission station, conducted an evaluation of the conducted an evaluation failed to conduct an Transmission substation, or a potential physical threats and of the potential physical evaluation of the primary control center in vulnerabilities to each of its threats and vulnerabilities potential physical Requirement R1 and verified Transmission station(s), to each of its threats and according to Requirement R2, Transmission substation(s), and Transmission station(s), vulnerabilities to each and each Transmission Operator primary control center(s) Transmission of its Transmission notified by a Transmission identified in Requirement R1 substation(s), and primary station(s), Owner according to Requirement but failed to consider one of control center(s) Transmission R3, shall conduct an evaluation Parts 4.1 through 4.3 in the identified in Requirement substation(s), and of the potential threats and evaluation. R1 but failed to consider primary control vulnerabilities of a physical two of Parts 4.1 through center(s) identified in attack to each of their respective 4.3 in the evaluation. Requirement R1; Transmission station(s), OR Transmission substation(s), and primary control center(s) The Responsible Entity identified in Requirement R1 and conducted an verified according to evaluation of the Requirement R2. potential physical threats and vulnerabilities to each of its Transmission station(s), Transmission substation(s), and primary control center(s) identified in Requirement R1 but failed to consider Parts 4.1 through 4.3. R5. Each Transmission Owner that The Responsible Entity The Responsible Entity The Responsible Entity The Responsible Entity CIP-014-2 identified a Transmission station, developed and developed and implemented a developed and developed and
the primary control center of the removal from the identification in Requirement R1. CIP-014-2 R4. Each Transmission Owner that identified a Transmission station, Transmission substation, or a primary control center in Requirement R1 and verified according to Requirement R2, and each Transmission Operator notified by a Transmission Owner according to Requirement R3, shall conduct an evaluation of the potential threats and vulnerabilities of a physical attack to each of their respective Transmission station(s), Transmission substation(s), and primary control center(s) identified in Requirement R1 and verified according to Requirement R2. N/A The Responsible Entity conducted an evaluation of the potential physical threats and vulnerabilities to each of its Transmission station(s), Transmission substation(s), and primary control center(s) identified in Requirement R1 but failed to consider one of Parts 4.1 through 4.3 in the evaluation. The Responsible Entity conducted an evaluation of the potential physical threats and vulnerabilities to each of its Transmission station(s), Transmission substation(s), and primary control center(s) identified in Requirement R1 but failed to consider two of Parts 4.1 through 4.3 in the evaluation. The Responsible Entity failed to conduct an evaluation of the potential physical threats and vulnerabilities to each of its Transmission station(s), Transmission substation(s), and primary control center(s) identified in Requirement R1; OR The Responsible Entity conducted an evaluation of the potential physical threats and vulnerabilities to each of its Transmission station(s), Transmission substation(s), and primary control center(s) identified in Requirement R1 but failed to consider Parts 4.1 through 4.3. CIP-014-2 R5. Each Transmission Owner that identified a Transmission station, The Responsible Entity developed and The Responsible Entity developed and implemented a The Responsible Entity developed and The Responsible Entity developed and
VSL_Matrix_Complete_2016_01_27.docx