7d7a304b__Storm_Center_Diary_2012_10_06__Purpose
[ID] CIP-003-4 [Description] Cyber Security - Security Management Controls [Purpose] 
Its purpose is to create and mantain Cyber Security Policy, define Leadership of a senior manager to lead an manage the implementation of CIP standards, control exceptions to policy, define and implement access control measures, change control, configuration management and information protection methodologies.
InfoSec Handlers Diary Blog - Internet Storm Center Diary 2012-10-06
Purpose