Implement information protection program per CIP-011-3 covering BES Cyber System Information (BCSI) including: identification methods to classify BCSI + protect and securely handle BCSI in physical and electronic formats + prevent unauthorized retrieval from a BES Cyber Asset + prevent unauthorized retrieval from disposed-of or released BES Cyber Asset (sanitization or destruction prior to disposal). Apply CIP-011 to high-impact and medium-impact BES Cyber Systems with external routable connectivity per CIP-011-3 effective 1 January 2024.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.