M1. Evidence must include the documented processes that collectively include each of the applicable requirement in CIP-007-6 Table R1 Ports and Services and additional evidence to demonstrate – implementation as described in the Measures column of the table. R1 Part 1.1 CIP-007-6 Table R1– Ports and Services Part Applicable Systems Requirements Measures 1.1 High Impact BES Cyber Systems and Where technically feasible, enable Examples of evidence may include, but are their associated: only logical network accessible ports not limited to: EACMS; that have been determined to be Documentation of the need for all needed by the Responsible Entity, PACS; and enabled ports on all applicable including port ranges or services PCA Cyber Assets and Electronic Access where needed to handle dynamic Medium Impact BES Systems Points, individually or by group. ports. If a device has no provision with External Routable Connectivity Listings of the listening ports on for disabling or restricting logical and their associated: the Cyber Assets, individually or by ports on the device then those ports group, from either the device that are open are deemed needed. configuration files, command PACS; and output (such as netstat), or PCA network scans of open ports; or Configuration files of host-based firewalls or other device level mechanisms that only allow needed ports and deny all others. Registered Entity Response (Required): Compliance Narrative: Provide a explanation, in your own words, of how you comply with this Requirement. References to supplied evidence, including links to the appropriate page, are recommended. Registered Entity Evidence (Required): The following information is requested for each document submitted as evidence. Also, evidence submitted should be highlighted and bookmarked, as appropriate, to identify the exact location where evidence of compliance may be found. Relevant Revision Page(s) Description of or Document or Applicability of File Name Document Title Version Date Section(s) Document Audit Team Evidence Reviewed (This section to be completed by the Compliance Enforcement Authority):
M1. Evidence must include the documented processes that collectively include each of the applicable requirement in CIP-007-6 Table R1 – Ports and Services and additional evidence to demonstrate implementation as described in the Measures column of the table. R1 Part 1.1 CIP-007-6 Table R1– Ports and Services Part Applicable Systems Requirements Measures 1.1 High Impact BES Cyber Systems and their associated: EACMS; PACS; and PCA Medium Impact BES Systems with External Routable Connectivity and their associated: PACS; and PCA Where technically feasible, enable only logical network accessible ports that have been determined to be needed by the Responsible Entity, including port ranges or services where needed to handle dynamic ports. If a device has no provision for disabling or restricting logical ports on the device then those ports that are open are deemed needed. Examples of evidence may include, but are not limited to: Documentation of the need for all enabled ports on all applicable Cyber Assets and Electronic Access Points, individually or by group. Listings of the listening ports on the Cyber Assets, individually or by group, from either the device configuration files, command output (such as netstat), or network scans of open ports; or Configuration files of host-based firewalls or other device level mechanisms that only allow needed ports and deny all others. Registered Entity Response (Required): Compliance Narrative: Provide a explanation, in your own words, of how you comply with this Requirement. References to supplied evidence, including links to the appropriate page, are recommended. Registered Entity Evidence (Required): The following information is requested for each document submitted as evidence. Also, evidence submitted should be highlighted and bookmarked, as appropriate, to identify the exact location where evidence of compliance may be found. File Name Document Title Revision or Version Document Date Relevant Page(s) or Section(s) Description of Applicability of Document Audit Team Evidence Reviewed (This section to be completed by the Compliance Enforcement Authority):
RSAW%20CIP-007-6_2015_v1.docx