|
|
|
- Are we making process on critical asset identification?
- What assets are not in compliance?
- Where are they deficient?
- Are we ahead or behind schedule on metrics dictated by NERC?
- Are security management controls in place? Where and in what state?
- Is the incident reporting system up and running?
- Ahead or behind schedule?
|