Standards Enforcement GCIP Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A compliance manager is explaining the Reliability Assurance Initiative (RAI) to a new team member. Which statement accurately describes the RAI's approach to compliance monitoring?

   • AIt uses a uniform checklist for all entities regardless of risk.
   • BIt only applies to entities that have previously violated standards.
   • CIt focuses on identifying and prioritizing risks to reliability, not just checking boxes.
   • DIt replaces all audits with self-certification only.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A regional entity is implementing the Reliability Assurance Initiative (RAI) to monitor compliance. Which practice aligns with RAI's methodology?

   • ARelying solely on self-reported compliance data.
   • BAuditing every entity with the same frequency and depth.
   • CConducting in-depth audits only for entities with high-risk indicators.
   • DEliminating all audits in favor of spot checks.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   During an audit, the compliance team is using the Reliability Standards Auditor Worksheet to document their assessment. What is the primary purpose of this worksheet?

   • ATo automatically determine compliance status without human judgment.
   • BTo provide a structured format for recording evidence and findings for each requirement.
   • CTo serve as a legal defense against enforcement actions.
   • DTo replace the need for a formal audit report.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A compliance team is preparing for an upcoming CIP audit. They have collected evidence, but they are concerned that the auditor may have difficulty locating the evidence for each requirement. What should the team do to facilitate the audit?

   • ACreate a cross-reference matrix that maps each requirement to the relevant evidence
   • BWait for the auditor to request each piece of evidence individually
   • CProvide all evidence in a single large folder without organization
   • DProvide only a summary of compliance without supporting evidence
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   During CIP audit preparation, which documentation is typically required to demonstrate compliance with CIP-007 (Systems Security Management)?

   • AEvidence of patch management procedures and implementation for applicable cyber assets
   • BA list of all personnel who have completed annual security awareness training
   • CA signed copy of the entity's disaster recovery plan
   • DA list of all vendors with access to the physical perimeter
   Reveal Solution Discussion Select an answer first