NERC CIP
CIP-010: Configuration Change Management and Vulnerability Assessments – NERC CIP

NERC CIP CIP-010 R4 Att1 2.2: CIP-010-4 R4 Att1 2.2: Third-party Transient Cyber Assets: malicious code mitigation

What does CIP-010 R4 Att1 2.2 require?

For Transient Cyber Assets managed by another party, mitigate malicious code, per capability, by reviewing the antivirus update level or process, application whitelisting, live read-only operating systems, system hardening or another method.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in CIP-010: Configuration Change Management and Vulnerability Assessments – NERC CIP

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NERC CIP controls