NERC CIP

CIP-005: Electronic Security Perimeter(s) – NERC CIP

NERC CIP CIP-005 R2.3: CIP-005-7 R2.3: Multi-factor authentication for Interactive Remote Access

Require multi-factor authentication for all Interactive Remote Access sessions (two of something known, held or inherent; a user ID is not a factor).

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in CIP-005: Electronic Security Perimeter(s) – NERC CIP

CIP-005 R1.1 CIP-005-7 R1.1: All routable Cyber Assets inside a defined ESP
CIP-005 R1.2 CIP-005-7 R1.2: External Routable Connectivity through an identified EAP
CIP-005 R1.3 CIP-005-7 R1.3: Inbound and outbound permissions with reasons, deny by default
CIP-005 R1.4 CIP-005-7 R1.4: Authenticate Dial-up Connectivity
CIP-005 R1.5 CIP-005-7 R1.5: Detect malicious communications at EAPs
CIP-005 R2.1 CIP-005-7 R2.1: Interactive Remote Access through an Intermediate System
CIP-005 R2.2 CIP-005-7 R2.2: Encryption of Interactive Remote Access terminating at the Intermediate System
CIP-005 R2.4 CIP-005-7 R2.4: Determine active vendor remote access sessions

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NERC CIP controls