API 1164 PR.AC-5: PR.AC-5 Network integrity through security zones and conduits with maintained architecture diagrams

The plan must require that every IAC cyber environment used in or supporting essential functions is segregated into IAC security zones and conduits, that every deployed asset is a member of a zone or conduit, that authorisation privileges for segregated environment accounts are managed on every human-access interface, and that network architecture diagrams showing the zone and conduit segmentation are maintained. At the Enhanced Profile the drawings include any external transport service provider used; at the Extended Profile the zone and conduit drawings show each asset inside the security perimeter.