CIP-005-7: Electronic Security Perimeters and Electronic Access Points, Interactive Remote Access through Intermediate Systems with encryption and MFA, and vendor remote access controls.
Placing routable-connected high and medium impact Cyber Assets inside a defined ESP, forcing all External Routable Connectivity through Electronic Access Points with deny-by-default rules, and detecting malicious traffic at Control Center access points.
Interactive Remote Access through an Intermediate System, encryption that terminates there, multi-factor authentication, and the ability to see and cut off active vendor remote sessions.
The version 7 requirement that extends vendor remote access controls to the access control and monitoring systems (EACMS) and physical access control systems (PACS) that guard high and medium impact systems.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.