Search

The Controls Guidance and Compliance Failure Points document guides registered entities in assessing risks associated with their business activities and designing appropriate internal controls in response. To help your entity get started, WECC has identified generic control objectives to mitigate the risks associated with the risks associated with CIP-010-4.

Control Objective 1: Maintain an accurate baseline inventory and prevent unauthorized baseline configuration changes. (Asset System Management and Maintenance)

Control Objective 2: Ensure baseline changes do not negatively affect cybersecurity controls. (Asset System Management and Maintenance) 

Control Objective 3: Prevent the introduction of malware or counterfeit software. (Identity Management and Access Control) 

Control Objective 4: Identify, assess, and mitigate system or asset security vulnerabilities to prevent them from being exploited. (Identity Management and Access Control) 

Control Objective 5: Mitigate software vulnerabilities and prevent the introduction of malicious code through the use of Transient Cyber Assets (TCA) or Removable Media (RM). (Identity Management and Access Control)

The Controls Guidance and Compliance Failure Points document guides registered entities in assessing risks associated with their business activities and designing appropriate internal controls in response. To help your entity get started, WECC has identified generic control objectives to mitigate the risks associated with the risks associated with FAC-014-3. You may want to consider these three objectives: 

Control Objective 1: Ensure SOLs, including IROLs, are determined for all applicable Facilities based on an established SOL method. (Long-term Studies/Assessments, Operational Studies/Assessments)
Control Objective 2: Provide SOLs and Planning Assessment data to responsible entities. (Entity Coordination, Modeling Data) 
Control Objective 3: Ensure Planning Assessment performance criteria are equally limiting or more limiting than the RC SOL method. (Long-term Studies/Assessments)