CIP-002: Cyber Security Measures

The following measures are used to demonstrate compliance:

  • M1. The Responsible Entity shall make available its current risk-based assessment methodology documentation as specified in Requirement R1.
  • M2. The Responsible Entity shall make available its list of Critical Assets as specified in Requirement R2.
  • M3. The Responsible Entity shall make available its list of Critical Cyber Assets as specified in Requirement R3.
  • M4. The Responsible Entity shall make available its approval records of annual approvals as specified in Requirement R4.