NERC CIP

CIP-005: Electronic Security Perimeter(s) – NERC CIP

NERC CIP CIP-005 R1.3: CIP-005-7 R1.3: Inbound and outbound permissions with reasons, deny by default

Require inbound and outbound access permissions at each EAP, including the reason for granting access, and deny all other access by default.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in CIP-005: Electronic Security Perimeter(s) – NERC CIP

CIP-005 R1.1 CIP-005-7 R1.1: All routable Cyber Assets inside a defined ESP
CIP-005 R1.2 CIP-005-7 R1.2: External Routable Connectivity through an identified EAP
CIP-005 R1.4 CIP-005-7 R1.4: Authenticate Dial-up Connectivity
CIP-005 R1.5 CIP-005-7 R1.5: Detect malicious communications at EAPs
CIP-005 R2.1 CIP-005-7 R2.1: Interactive Remote Access through an Intermediate System
CIP-005 R2.2 CIP-005-7 R2.2: Encryption of Interactive Remote Access terminating at the Intermediate System
CIP-005 R2.3 CIP-005-7 R2.3: Multi-factor authentication for Interactive Remote Access
CIP-005 R2.4 CIP-005-7 R2.4: Determine active vendor remote access sessions

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NERC CIP controls