ensure that every Critical Cyber every Critical Cyber Asset resides within an Asset resides within an Electronic Security Perimeter. Electronic Security The Responsible Entity shall Perimeter. identify and document the OR Electronic Security Perimeter(s) The Responsible Entity and all access points to the did not identify and perimeter(s). document the Electronic Security Perimeter(s) and all access points to the perimeter(s). Access points to the Electronic R1.1. N/A N/A N/A Access points to the Security Perimeter(s) shall Electronic Security include any externally connected Perimeter(s) do not communication end point (for include all externally example, dial-up modems) connected terminating at any device within communication end the Electronic Security point (for example, Perimeter(s). dial-up modems) terminating at any device within the Electronic Security Perimeter(s). For a dial-up accessible Critical R1.2. N/A N/A N/A For one or more dial-up Cyber Asset that uses a accessible Critical protocol, the Cyber Assets that use a Responsible Entity shall define non-routable protocol, an Electronic Security Perimeter the Responsible Entity for that single access point at the did not define an dial-up device. Electronic Security Perimeter for that single access point at the dial-up device. Communication links connecting R1.3. N/A N/A N/A At least one end point discrete Electronic Security of a communication Perimeters shall not be link within the
ensure that every Critical Cyber Asset resides within an Electronic Security Perimeter. The Responsible Entity shall identify and document the Electronic Security Perimeter(s) and all access points to the perimeter(s). every Critical Cyber Asset resides within an Electronic Security Perimeter. OR The Responsible Entity did not identify and document the Electronic Security Perimeter(s) and all access points to the perimeter(s). R1.1. Access points to the Electronic Security Perimeter(s) shall include any externally connected communication end point (for example, dial-up modems) terminating at any device within the Electronic Security Perimeter(s). N/A N/A N/A Access points to the Electronic Security Perimeter(s) do not include all externally connected communication end point (for example, dial-up modems) terminating at any device within the Electronic Security Perimeter(s). R1.2. For a dial-up accessible Critical Cyber Asset that uses a protocol, the Responsible Entity shall define an Electronic Security Perimeter for that single access point at the dial-up device. N/A N/A N/A For one or more dial-up accessible Critical Cyber Assets that use a non-routable protocol, the Responsible Entity did not define an Electronic Security Perimeter for that single access point at the dial-up device. R1.3. Communication links connecting discrete Electronic Security Perimeters shall not be N/A N/A N/A At least one end point of a communication link within the
VSL_Matrix_Complete_2016_01_27.docx