CIP-003_Workbook_10152019

This 2019 Reliability Review Subcommittee Annual Assessment (2019 Annual Report) was developed by the SERC Reliability Review Subcommittee (RRS). This assessment was developed based on data and narrative information collected by SERC from its Registered Entities to independently assess the long-term reliability of the SERC BPS while identifying trends, emerging issues, and potential risks during the ten-year assessment period. The Reliability Review Subcommittee (RRS), at the direction of SERC’s Engineering Committee, supported the development of this assessment through a review process that leveraged the knowledge and experience of system planners, RRS members, SERC staff, and other subject matter experts. This review process ensures the accuracy and completeness of all data and information. The SERC Engineering Committee reviewed and approved this assessment.


LowImpactWorkbook
1

RelStd_CIP-003-7
2

CIP-003-7 - Cyber Security — Security Management Controls
2

A. Introduction
2

B. Requirements and Measures
6

C. Compliance
8

D. Regional Variances
32-33

E. Interpretations
32-33

F. Associated Documents
32-33

Version History
34

CIP-003-7_Notes
72

CIP-003 Effective Dates
75

CIP-003-7 Implementation Plan
76

RSAW_Notes
78

Evidence Request Tool
84

RSAW CIP-003-7_2019_v1_original
90

Applicability of Requirements
90

Findings
91

Subject Matter Experts
92

R1 Supporting Evidence and Documentation
93

Registered Entity Evidence (Required):
94

Audit Team Evidence Reviewed (This section to be completed by the Compliance Enforcement Authority):
94

Compliance Assessment Approach Specific to CIP-003-7, R1
95

Auditor Notes:
95

R2 Supporting Evidence and Documentation
96

Registered Entity Evidence (Required):
96

Audit Team Evidence Reviewed (This section to be completed by the Compliance Enforcement Authority):
96

Compliance Assessment Approach Specific to CIP-003-7, R2
97

Auditor Notes:
101

CIP-003-7 Electronic Controls Implementation Study
102

R3 Supporting Evidence and Documentation
103

Registered Entity Evidence (Required):
103

Audit Team Evidence Reviewed (This section to be completed by the Compliance Enforcement Authority):
103

Compliance Assessment Approach Specific to CIP-003-7, R3
103

Auditor Notes:
103

R4 Supporting Evidence and Documentation
104

Registered Entity Evidence (Required):
104

Audit Team Evidence Reviewed (This section to be completed by the Compliance Enforcement Authority):
104

Compliance Assessment Approach Specific to CIP-003-7, R4
104

Auditor Notes:
105

Additional Information:
106

Reliability Standard
106

Sampling Methodology
106

Regulatory Language
106

Selected Glossary Terms
107

Attachment 1
108

Attachment 2
110

Revision History for RSAW
113

FeedbackSurvey
114

www.serc1.org

Made with FlippingBook - Online magazine maker