CIP-002-5.1a, the scoping standard: how entities identify BES Cyber Systems and rate them high, medium or low impact, which decides which other CIP requirements apply.
The process that considers each Control Center, substation, generation resource, restoration asset and protection system and applies the Attachment 1 bright-line criteria to identify high and medium impact BES Cyber Systems and assets containing low impact systems.
The recurring obligation to review the R1 identifications, update them for changes, and have the CIP Senior Manager or delegate approve them at least every 15 calendar months, even when nothing qualifies.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.