CIP-011-3 R1 Information protection program
Methods to identify BCSI and to protect and securely handle it to protect confidentiality, with evidence examples that distinguish on-premise from off-premise (for example cloud) storage.

CIP-011-3: identifying and protecting BES Cyber System Information (BCSI), including stored off-premise, and preventing unauthorized retrieval when Cyber Assets are reused or disposed of.
Methods to identify BCSI and to protect and securely handle it to protect confidentiality, with evidence examples that distinguish on-premise from off-premise (for example cloud) storage.
Preventing unauthorized retrieval of BCSI from Cyber Assets before they are released for reuse outside the CIP environment or disposed of.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.