NERC CIP CIP-003 R2 Att1 S3: CIP-003-9 R2 Att1 S3: Low impact plan Section 3: electronic access controls

For each asset containing low impact BES Cyber Systems, permit only the inbound and outbound electronic access the entity determines necessary for communications that are between a low impact BES Cyber System and a Cyber Asset outside the asset, use a routable protocol entering or leaving the asset, and are not time-sensitive protection or control communications between intelligent electronic devices (such as IEC TR 61850-90-5 R-GOOSE); and authenticate all Dial-up Connectivity that provides access to low impact BES Cyber Systems, per Cyber Asset capability.