7d7a304b__Storm_Center_Diary_2012_10_06__Purpose
[ID] CIP-007-4 [Description] Cyber Security - Systems Security Management [Purpose] 
It requires Responsible Entities to define methods, processes, and procedures for securing those systems determined to be Critical Cyber Assets inside the Electronic Security Perimeter, like test procedures, security baseline for ports and services, security patch management, malicious software prevention, account management and security status monitoring.
InfoSec Handlers Diary Blog - Internet Storm Center Diary 2012-10-06
Purpose