Part 1.2 in AR1 Part 1.2 Please Verify the Responsible Entity has documented one Table R1 Electronic Security Perimeter provide: or more processes which ensure all external – routable connectivity is through an identified (i) One or more Applicable Systems electronic access point. documented processes High Impact BES cyber systems with external pertaining to routable connectivity and their associated: requirement R1 Part protected assets 1.2. Medium Impact BES cyber systems with external routable connectivity and their associated: protected cyber assets Requirements All external routable connectivity must be through an identified electronic access point. Measures An example of evidence may include, but is not limited to, network diagrams showing all external routable communication paths and the identified electronic access points. (ii) Evidence that all Verify that all external routable connectivity is external routable through an identified electronic access point. connectivity are through an identified For each defined electronic security perimeter electronic access without an identified electronic access point, point. verify that no external routable connectivity exists.
Part 1.2 in Table R1 – Electronic Security Perimeter Applicable Systems High Impact BES cyber systems with external routable connectivity and their associated: protected assets Medium Impact BES cyber systems with external routable connectivity and their associated: protected cyber assets Requirements All external routable connectivity must be through an identified electronic access point. Measures An example of evidence may include, but is not limited to, network diagrams showing all external routable communication paths and the identified electronic access points. AR1 Part 1.2 Please provide: (i) One or more documented processes pertaining to requirement R1 Part 1.2. Verify the Responsible Entity has documented one or more processes which ensure all external routable connectivity is through an identified electronic access point. (ii) Evidence that all external routable connectivity are through an identified electronic access point. Verify that all external routable connectivity is through an identified electronic access point. For each defined electronic security perimeter without an identified electronic access point, verify that no external routable connectivity exists.
CIP-005-AB-5-RSAW.docx