R-012

NERC CIP compliance documentation gap

ActiveControl Center SCADARegulatoryOwner: A. Volkov

Pre-MitigationModerate

$360K

Expected monetary value

Score 7.5

40% likely

ResidualLow

$68.4K

Expected monetary value

Score 5.3

18% likely

Mitigation Effect

$291.6K

EMV reduction from response plan

Mitigation cost $110K70% effective

Cause (because of)

Evolving compliance standards and audit scope

Uncertain Event (there is a risk that)

Audit finds documentation deficiencies

Consequence (which would lead to)

Penalties and remediation effort

Root Cause

Evolving compliance standards and audit scope

Trigger / Threshold

Regulator schedules compliance audit

Early Warning Indicator

Regulator schedules compliance audit

Assumptions

Baseline assumptions per approved project execution plan.