Identify IT and OT systems clearly in an asset register kept up to date, with governance and ownership responsibilities and an asset valuation (cost and cost of upkeep). Using IACS UR E26 and E27 as guidance for existing ships, documentation may include inventories of communicating devices and of network devices (topology drawings of OT to OT and OT to IT interfaces, functional design specifications, switch and firewall configurations), a logical network map (addresses, IP or otherwise, access points that are not Ethernet, endpoints, connectors and field devices), a software inventory with versions and network services per device. Automated inventory tools suit IT but should only be used on OT by qualified experts with the Master and Chief Engineer.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.