CIP-002: Cyber Security SubRequirements

  • R1.1. The Responsible Entity shall maintain documentation describing its risk-based assessment methodology that includes procedures and evaluation criteria.
  • R1.2. The risk-based assessment shall consider the following assets:
    • R1.2.1. Control centers and backup control centers performing the functions of the entities listed in the Applicability section of this standard.
    • R1.2.2. Transmission substations that support the reliable operation of the Bulk Electric System.
    • R1.2.3. Generation resources that support the reliable operation of the Bulk Electric System.
    • R1.2.4. Systems and facilities critical to system restoration, including blackstart generators and substations in the electrical path of transmission lines used for initial system restoration.
    • R1.2.5. Systems and facilities critical to automatic load shedding under a common control system capable of shedding 300 MW or more.
    • R1.2.6. Special Protection Systems that support reliable operation of the Bulk Electric System.
    • R1.2.7. Any additional assets that support the reliable operation of the Bulk Electric System that the Responsible Entity deems appropriate to include in its assessment.