CIP-003? Didn’t we already cover this? And now this is due in less than a year?

NERC CIP-003 includes security management controls to protect critical cyber assets by identifying, categorizing, and implementing security measures to ensure the reliability and resilience of the North American electricity industry.

What are the low impact requirements for CIP-002? Evidence! What evidence?

What does it mean? Low impact CIP standards are effective now with more becoming mandatory in the future. Identifying Bulk Electric System assets and categorizing their impact level is no easy task.