Req ID

Re quirement name

Supported by CIP

Need ap plication support

Need HW solution

Status if supported by CIP

CR-7.1

Denial of service p rotection

TRUE

TRUE

FALSE

Compl etedAdded package nftables

CR-7.1 RE(1)

Manage comm unication load from component

TRUE

TRUE

FALSE

Compl etedAdded package nftables

CR-7.2

Resource m anagement

FALSE

TRUE

FALSE

N.A.

CR-7.3

Control system backup

TRUE

FALSE

FALSE

in-progr essAdding backu p/restore package

CR-7.3 RE(1)

Backup integrity ver ification

TRUE

FALSE

FALSE

in-progr essAdding backu p/restore package

CR-7.4

Control system recovery and recon stitution

TRUE

TRUE

FALSE

in-progr essAdding backu p/restore package

CR-7.5

Emergency power

FALSE

FALSE

FALSE

N.A.

CR-7.6

Network and security conf iguration settings

FALSE

TRUE

FALSE

N.A.

CR-7.6 RE(1)

Machine -readable reporting of current security settings

FALSE

TRUE

FALSE

N.A.

CR-7.7

Least func tionality

FALSE

TRUE

FALSE

N.A.

CR-7.8

Control system component inventory

FALSE

TRUE

FALSE

N.A.

Tests reference and CIP recommendation

Req ID

Status if supported by CIP

IEC-62443-4-2 tests reference

CIP recommendation

CR-7.1

CompletedAdded package nftables

TC_CR7. 1_1

CIP supports this requirement.CIP users should do CRT (communication Robustness Testing) to meet this requirement.

CR-7.1 RE(1)

CompletedAdded package nftables

None

CIP supports this requirement.CIP users should use CIP package and make sure in case of DoS attack essential function of the system is not affected and system runs in degraded mode with essential services

CR-7.2

N.A.

None

CIP platform does not support this requirementCIP users should make sure monitoring of system does not affect essential functions of the system

CR-7.3

in -progressAdding backup/restore package

None

CIP supports this requirement.CIP users should use the package and configure based on this requirement

CR-7.3 RE(1)

in -progressAdding backup/restore package

None

Same as CR-7.3

CR-7.4

in -progressAdding backup/restore package

None

Same as CR-7.3

CR-7.5

N.A.

None

No component level requirement

CR-7.6

N.A.

None

CIP does not support this requirementCIP users should provide setting to configure network and security settings based on the product uses cases

CR-7.6 RE(1)

N.A.

None

Same as CR-7.6

CR-7.7

N.A.

None

CIP platform does not support this requirement.CIP users should use CIP capabilities and support it.

CR-7.8

N.A.

None

Same as CR-7.7