[ID] CIP-003-4 [Description] Cyber Security - Security Management Controls [Purpose] 
Its purpose is to create and mantain Cyber Security Policy, define Leadership of a senior manager to lead an manage the implementation of CIP standards, control exceptions to policy, define and implement access control measures, change control, configuration management and information protection methodologies.