NERC CIP
CIP-010: Configuration Change Management and Vulnerability Assessments – NERC CIP

NERC CIP CIP-010 R3.3: CIP-010-4 R3.3: Active vulnerability assessment before adding new Cyber Assets

What does CIP-010 R3.3 require?

Before adding a new applicable Cyber Asset to production, perform an active vulnerability assessment of it, except for CIP Exceptional Circumstances and like replacements of the same type modelled on an existing baseline.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in CIP-010: Configuration Change Management and Vulnerability Assessments – NERC CIP

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NERC CIP controls