CIP-003 - Security Management Controls

CIP-003 defines the security management controls that bulk electric system owners and operators must implement, requiring a documented security program, defined policies and procedures, and assigned responsibilities. It also mandates risk assessments, continuous monitoring, and corrective actions to protect critical cyber assets and ensure compliance.