Implement personnel and training controls per CIP-004-7 covering: cyber security awareness reinforcement at least quarterly + cyber security training prior to BES Cyber System access + 7-year personnel risk assessment (criminal history check) + reassessment every 7 years + access management (request + approval + revocation within 24 hours of termination + access to BES Cyber System Information (BCSI) tracking + quarterly access verification). Apply to Cyber Security Coordinator + workforce + contractors with BES Cyber System access.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.