R1 Part 1.2 CIP-005-5 Table R1 Electronic Security Perimeter – Part Applicable Systems Requirements Measures 1.2 High Impact BES Systems with All External Routable Connectivity An example of evidence may include, but is External Routable Connectivity and must be through an identified not limited to, network diagrams showing their associated: Electronic Access (EAP). all external routable communication paths PCA and the identified EAPs. Medium Impact BES Cyber Systems with External Routable Connectivity and their associated: PCA Registered Entity Response (Required): Compliance Narrative: Provide a explanation, in your own words, of how you comply with this Requirement. References to supplied evidence, including links to the appropriate page, are recommended. Registered Entity Evidence (Required): The following information is requested for each document submitted as evidence. Also, evidence submitted should be highlighted and bookmarked, as appropriate, to identify the location where evidence of compliance may be found. Relevant Revision Page(s) Description of or Document or Applicability of File Name Document Version Date Section(s) Document Audit Team Evidence Reviewed (This section to be completed by the Compliance Enforcement Authority): Compliance Assessment Approach Specific to CIP-005-5, R1, Part 1.2 This section to be completed by the Compliance Enforcement Authority Verify the Responsible Entity has documented one or more processes which ensure all External Routable Connectivity is through an identified Electronic Access Point (EAP). Verify that all External Routable Connectivity is through an identified EAP. For each defined ESP without an identified EAP, verify that no External Routable Connectivity
R1 Part 1.2 CIP-005-5 Table R1 – Electronic Security Perimeter Part Applicable Systems Requirements Measures 1.2 High Impact BES Systems with External Routable Connectivity and their associated: PCA Medium Impact BES Cyber Systems with External Routable Connectivity and their associated: PCA All External Routable Connectivity must be through an identified Electronic Access (EAP). An example of evidence may include, but is not limited to, network diagrams showing all external routable communication paths and the identified EAPs. Registered Entity Response (Required): Compliance Narrative: Provide a explanation, in your own words, of how you comply with this Requirement. References to supplied evidence, including links to the appropriate page, are recommended. Registered Entity Evidence (Required): The following information is requested for each document submitted as evidence. Also, evidence submitted should be highlighted and bookmarked, as appropriate, to identify the location where evidence of compliance may be found. File Name Document Revision or Version Document Date Relevant Page(s) or Section(s) Description of Applicability of Document Audit Team Evidence Reviewed (This section to be completed by the Compliance Enforcement Authority): Compliance Assessment Approach Specific to CIP-005-5, R1, Part 1.2 This section to be completed by the Compliance Enforcement Authority Verify the Responsible Entity has documented one or more processes which ensure all External Routable Connectivity is through an identified Electronic Access Point (EAP). Verify that all External Routable Connectivity is through an identified EAP. For each defined ESP without an identified EAP, verify that no External Routable Connectivity