measures identified by the approved Technical Feasibility Exception are implemented. Part 1.2 in AR1. Part 1.2 Please Verify the Responsible Entity has documented provide: one or more processes that protect against the Table R1 Ports and Services – use of unnecessary physical input/output ports used for network connectivity, console Applicable Systems One or more commands, or removable media. High Impact BES cyber systems documented processes Medium Impact BES systems at control centres pertaining to requirement R1 Part 1.2. Requirements Protect against the use of unnecessary physical ports used for network connectivity, console commands, or removable media. Measures An example of evidence may include, but is not limited to, documentation showing of protection of physical input/output ports, either logically through system configuration or physically using a port lock or signage. For each asset of an Applicable System, Evidence that the verify that the unnecessary physical input/output processes pertaining to ports used for network connectivity, console requirement R1 Part 1.2 commands, or removable media are protected have been implemented. against use. Findings
measures identified by the approved Technical Feasibility Exception are implemented. Part 1.2 in Table R1 – Ports and Services Applicable Systems High Impact BES cyber systems Medium Impact BES systems at control centres Requirements Protect against the use of unnecessary physical ports used for network connectivity, console commands, or removable media. Measures An example of evidence may include, but is not limited to, documentation showing of protection of physical input/output ports, either logically through system configuration or physically using a port lock or signage. AR1. Part 1.2 Please provide: One or more documented processes pertaining to requirement R1 Part 1.2. Verify the Responsible Entity has documented one or more processes that protect against the use of unnecessary physical input/output ports used for network connectivity, console commands, or removable media. Evidence that the processes pertaining to requirement R1 Part 1.2 have been implemented. For each asset of an Applicable System, verify that the unnecessary physical input/output ports used for network connectivity, console commands, or removable media are protected against use. Findings
CIP-007-AB-5-RSAW.docx