Canada Energy Regulator Filing of CIP-014 Evidence Retention Change

Summary:

CIP-014-3, "Physical Security" was revised to remove Compliance Section 1.4 that was referenced in Section 1.2 Evidence Retention.

Additional Discussion:

Revision Removed

Section 1.4, "Additional Compliance Information"
Confidentiality: To protect the confidentiality and sensitive nature of the evidence for demonstrating compliance with this standard, all evidence will be retained at the Transmission Owner’s and Transmission Operator’s facilities.

Section 1.2, "Evidence Retention" (now reads)

The following evidence retention periods identify the period of time an entity is required to retain specific evidence to demonstrate compliance. For instances where the evidence retention period specified below is shorter than the time since the last audit, the CEA may ask an entity to provide other evidence during an on-site visit to show that it was compliant for the full time period since the last audit.
The Transmission Owner and Transmission Operator shall keep data or evidence to show compliance, as identified below, unless directed by its Compliance Enforcement Authority (CEA) to retain specific evidence for a longer period of time as part of an investigation.
The responsible entities shall retain documentation as evidence for three years.
If a Responsible Entity is found non-compliant, it shall keep information related to the non-compliance until mitigation is complete and approved, or for the time specified above, whichever is longer.
The CEA shall keep the last audit records and all requested and submitted subsequent audit records, subject to the confidentiality provisions of Section 1500 of the Rules of Procedure.
Note that the previous version of the evidence section included a Section 1.4 which was deleted.

Associated Files:

• CIP-014 Evidence Provision_attachments