NERC CIP

CIP-005: Electronic Security Perimeter(s) – NERC CIP

NERC CIP CIP-005 R3.1: CIP-005-7 R3.1: Determine authenticated vendor-initiated connections to EACMS and PACS

What does CIP-005 R3.1 require?

Have one or more methods to determine authenticated vendor-initiated remote connections.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in CIP-005: Electronic Security Perimeter(s) – NERC CIP

CIP-005 R1.1 CIP-005-7 R1.1: All routable Cyber Assets inside a defined ESP
CIP-005 R1.2 CIP-005-7 R1.2: External Routable Connectivity through an identified EAP
CIP-005 R1.3 CIP-005-7 R1.3: Inbound and outbound permissions with reasons, deny by default
CIP-005 R1.4 CIP-005-7 R1.4: Authenticate Dial-up Connectivity
CIP-005 R1.5 CIP-005-7 R1.5: Detect malicious communications at EAPs
CIP-005 R2.1 CIP-005-7 R2.1: Interactive Remote Access through an Intermediate System
CIP-005 R2.2 CIP-005-7 R2.2: Encryption of Interactive Remote Access terminating at the Intermediate System
CIP-005 R2.3 CIP-005-7 R2.3: Multi-factor authentication for Interactive Remote Access

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NERC CIP controls