CIP-002-5.1a BES Cyber System Categorization

Dashboard capabilities

• One guided workflow carries your plant through CIP-002-5.1a from the identification process to the final report, with every requirement assessed.
• Your program record holds the Responsible Entity, its North American Electric Reliability Corporation (NERC) Compliance Registry (NCR) number, the CIP Senior Manager and any delegate, and the identification process document with its revision and approval date.
• The R1 identification process is assessed for each asset type it must consider (Control Centers, Transmission stations and substations, Generation resources, restoration assets, Special Protection Systems, and Distribution Provider Protection Systems), and the R1.1 high impact determination under Attachment 1 Section 1 is recorded with a count of systems found and the basis.
• The R1.2 medium impact determination is made from your net Real Power in megawatts (MW), Interconnection, reactive capability in megavolt-amperes reactive (MVAR), and the external designations for criteria 2.3, 2.6, 2.8, and 2.9, with a result and basis for each other Section 2 criterion; the R1.3 low impact determination is made at the asset level under Section 3, with no discrete list of low impact systems needed, and your plant's resulting impact rating is recorded with its basis.
• Your R2 review and approval dates, who reviewed and who approved, and the next due dates are tracked; a blank next-approval date defaults to the last day of the 15th calendar month after the last approval, and a recurring R2 review-and-approval task is set for your plant.
• Evidence slots hold the process document, delegation record, implementation record, impact lists, and review and approval records, and the final report gives an executive summary of the impact rating, the three determinations, and the next approval due date.