| Req ID | Requirement name | Supported by CIP | Need application support | Need HW solution | Status if supported by CIP | IEC-62443-4-2 tests reference | CIP recommendation |
|---|---|---|---|---|---|---|---|
| CR-7.1 | Denial of service protection | TRUE | TRUE | FALSE | Completed Added package nftables |
https://gitlab.com/cip-project/cip-testing/cip-security-tests/-/tree/master/iec-security-tests/singlenode-testcases/TC_CR7.1_1 | CIP supports this requirement. CIP users should do CRT (communication Robustness Testing) to meet this requirement. |
| CR-7.1 RE(1) | Manage communication load from component | TRUE | TRUE | FALSE | Completed Added package nftables |
None | CIP supports this requirement. CIP users should use CIP package and make sure in case of DoS attack essential function of the system is not affected and system runs in degraded mode with essential services |
| CR-7.2 | Resource management | FALSE | TRUE | FALSE | N.A. | None | CIP platform does not support this requirement CIP users should make sure monitoring of system does not affect essential functions of the system |
| CR-7.3 | Control system backup | TRUE | FALSE | FALSE | in-progress Adding backup/restore package |
None | CIP supports this requirement. CIP users should use the package and configure based on this requirement |
| CR-7.3 RE(1) | Backup integrity verification | TRUE | FALSE | FALSE | in-progress Adding backup/restore package |
None | Same as CR-7.3 |
| CR-7.4 | Control system recovery and reconstitution | TRUE | TRUE | FALSE | in-progress Adding backup/restore package |
None | Same as CR-7.3 |
| CR-7.5 | Emergency power | FALSE | FALSE | FALSE | N.A. | None | No component level requirement |
| CR-7.6 | Network and security configuration settings | FALSE | TRUE | FALSE | N.A. | None | CIP does not support this requirement CIP users should provide setting to configure network and security settings based on the product uses cases |
| CR-7.6 RE(1) | Machine-readable reporting of current security settings | FALSE | TRUE | FALSE | N.A. | None | Same as CR-7.6 |
| CR-7.7 | Least functionality | FALSE | TRUE | FALSE | N.A. | None | CIP platform does not support this requirement. CIP users should use CIP capabilities and support it. |
| CR-7.8 | Control system component inventory | FALSE | TRUE | FALSE | N.A. | None | Same as CR-7.7 |