7d7a304b__Storm_Center_Diary_2012_10_06__Purpose
[ID] CIP-004-4a [Description] Cyber Security - Personnel and Training [Purpose] 
It requires that personnel having authorized cyber or authorized unescorted physical access to Critical Cyber Assets obtained in CIP002-4a, including contractors and service vendors, have an appropriate level of personnel risk assessment, training, and security awareness as defined by the risk assessment model inside the company and in compliance with the Information Security Management System.
InfoSec Handlers Diary Blog - Internet Storm Center Diary 2012-10-06
Purpose