Circumstances) prior to did not identify, assess and their being granted correct the deficiencies. their being granted correct the deficiencies. (2.2) authorized electronic and (2.1) authorized electronic authorized unescorted OR OR and authorized physical access, and did The Responsible Entity unescorted physical not identify, assess and The Responsible Entity implemented a cyber security access, and did not correct the deficiencies. implemented a cyber training program but failed to identify, assess and (2.2) security training train two individuals with correct the deficiencies. program but failed to OR authorized electronic or (2.2) train four or more authorized unescorted physical The Responsible Entity individuals (with the OR access within 15 calendar implemented a cyber exception of CIP The Responsible Entity months of the previous training security training program Exceptional implemented a cyber completion date, and did not but failed to train three Circumstances) prior to security training identify, assess and correct the individuals with their being granted program but failed to deficiencies. (2.3) authorized electronic or authorized electronic train one individual authorized unescorted and authorized with authorized physical access within 15 unescorted physical electronic or authorized calendar months of the access, and did not unescorted physical previous training identify, assess and access within 15 completion date, and did correct the deficiencies. calendar months of the not identify, assess and (2.2) previous training correct the deficiencies. OR completion date, and (2.3) did not identify, assess The Responsible Entity and correct the implemented a cyber deficiencies. (2.3) security training program but failed to train four or more individuals with authorized electronic or authorized unescorted physical access within 15 calendar months of the previous training completion date, and did not identify, assess and correct the deficiencies. (2.3)
Circumstances) prior to their being granted authorized electronic and authorized unescorted physical access, and did not identify, assess and correct the deficiencies. (2.2) OR The Responsible Entity implemented a cyber security training program but failed to train one individual with authorized electronic or authorized unescorted physical access within 15 calendar months of the previous training completion date, and did not identify, assess and correct the deficiencies. (2.3) did not identify, assess and correct the deficiencies. (2.2) OR The Responsible Entity implemented a cyber security training program but failed to train two individuals with authorized electronic or authorized unescorted physical access within 15 calendar months of the previous training completion date, and did not identify, assess and correct the deficiencies. (2.3) their being granted authorized electronic and authorized unescorted physical access, and did not identify, assess and correct the deficiencies. (2.2) OR The Responsible Entity implemented a cyber security training program but failed to train three individuals with authorized electronic or authorized unescorted physical access within 15 calendar months of the previous training completion date, and did not identify, assess and correct the deficiencies. (2.3) correct the deficiencies. (2.1) OR The Responsible Entity implemented a cyber security training program but failed to train four or more individuals (with the exception of CIP Exceptional Circumstances) prior to their being granted authorized electronic and authorized unescorted physical access, and did not identify, assess and correct the deficiencies. (2.2) OR The Responsible Entity implemented a cyber security training program but failed to train four or more individuals with authorized electronic or authorized unescorted physical access within 15 calendar months of the previous training completion date, and did not identify, assess and correct the deficiencies. (2.3)
VSL_Matrix_Complete_2016_01_27.docx