Project 2009-16 Interpretation − CIP-007-1, R2 — Systems Security Management