R3 - Personnel Risk Assessment

R3 requires entities to evaluate the risk each individual poses to bulk electric reliability, covering employees, contractors, and other authorized personnel. The assessment must consider factors such as background, access level, job function, and any known security concerns, and it must be documented, reviewed regularly, and updated when circumstances change.