[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nerc-cip\u002Fcip-005":3},{"item":4,"lessons":16,"controls":66,"related":97},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nerc-cip","cip-005","CIP-005","CIP-005: Electronic Security Perimeter(s)",74,"North American Electric Reliability Corporation (NERC)","**What it asks for.** CIP-005 is a NERC Critical Infrastructure Protection standard for the North American bulk electric system. It requires responsible entities to place applicable BES Cyber Systems within a defined electronic security perimeter, control and justify inbound and outbound access through electronic access points, detect known or suspected malicious communications and secure interactive remote access, including through an intermediate system and multi-factor authentication.\n\n**In practice.** Entities document each perimeter and access point, keep rule sets with a stated reason for each permitted connection, route remote access through an intermediate system and monitor and can disable active vendor remote sessions. Evidence includes network diagrams, firewall rule reviews, remote access logs and procedures for vendor access.\n\n**Common gaps.** Firewall rules without documented justification are a common finding. Vendor remote access paths are also frequently less controlled than the main perimeter.",null,"https:\u002F\u002Fwww.nerc.com\u002Fpa\u002FStand\u002FPages\u002FReliabilityStandards.aspx","See the NERC standards","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"end-of-life-ot-devices-enable-supermarket-refrigeration-cyberattack","End-of-Life OT Devices Enable Supermarket Refrigeration Cyberattack","2026-10-15T14:20:22.449+00:00",{"slug":23,"title":24,"published_at":25},"ai-agents-can-compromise-ot-systems-and-move-physical-equipment-in-under-17-minutes","AI Agents Can Compromise OT Systems and Move Physical Equipment in Under 17 Minutes","2026-10-14T18:21:46.77+00:00",{"slug":27,"title":28,"published_at":29},"refrigeration-controller-vulnerabilities-enable-remote-supermarket-attacks","Refrigeration Controller Vulnerabilities Enable Remote Supermarket Attacks","2026-10-13T10:21:18.66+00:00",{"slug":31,"title":32,"published_at":33},"end-of-life-rtu500-firmware-exposes-critical-infrastructure-to-high-severity-vulnerabilities","End-of-Life RTU500 Firmware Exposes Critical Infrastructure to High-Severity Vulnerabilities","2026-10-06T18:22:11.807+00:00",{"slug":35,"title":36,"published_at":37},"water-sectors-legacy-ot-systems-and-insecure-connections-leave-critical-infrastructure-exposed","Water Sector's Legacy OT Systems and Insecure Connections Leave Critical Infrastructure Exposed","2026-09-30T12:22:39.475+00:00",{"slug":39,"title":40,"published_at":41},"single-malformed-packet-can-crash-ot-servers-via-tdengine-zero-day","Single Malformed Packet Can Crash OT Servers via TDengine Zero-Day","2026-09-28T22:20:23.225+00:00",{"slug":43,"title":44,"published_at":45},"third-party-ics-integrator-access-enables-foreign-actor-breach-of-industrial-data","Third-Party ICS Integrator Access Enables Foreign Actor Breach of Industrial Data","2026-09-24T12:20:23.969+00:00",{"slug":47,"title":48,"published_at":49},"third-party-ics-integrator-access-exposes-critical-infrastructure-to-foreign-cyber-threats","Third-Party ICS Integrator Access Exposes Critical Infrastructure to Foreign Cyber Threats","2026-09-23T22:21:34.789+00:00",{"slug":51,"title":52,"published_at":53},"ot-and-medical-devices-dangerously-exposed-due-to-poor-network-isolation","OT and Medical Devices Dangerously Exposed Due to Poor Network Isolation","2026-09-22T14:22:40.404+00:00",{"slug":55,"title":56,"published_at":57},"87-of-ot-networks-lack-proper-isolation-enabling-lateral-movement","87% of OT Networks Lack Proper Isolation, Enabling Lateral Movement","2026-09-22T14:20:19.243+00:00",{"slug":59,"title":60,"published_at":61},"foreign-hackers-alter-ot-settings-at-colorado-water-utilities","Foreign Hackers Alter OT Settings at Colorado Water Utilities","2026-09-21T12:21:33.387+00:00",{"slug":63,"title":64,"published_at":65},"siemens-reyrolle-7sr5-vulnerabilities-expose-ics-devices-to-remote-attack","Siemens Reyrolle 7SR5 Vulnerabilities Expose ICS Devices to Remote Attack","2026-09-15T17:22:16.872+00:00",[67,72,77,82,87,92],{"slug":68,"name":69,"problem":70,"stories":71},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",65,{"slug":73,"name":74,"problem":75,"stories":76},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",38,{"slug":78,"name":79,"problem":80,"stories":81},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",20,{"slug":83,"name":84,"problem":85,"stories":86},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",16,{"slug":88,"name":89,"problem":90,"stories":91},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",13,{"slug":93,"name":94,"problem":95,"stories":96},"patch-management","Automated patch management","Known holes get closed in days, not months.",9,[98,104,110,116,121,127,132,137],{"family":99,"item":100,"code":101,"title":102,"together":103},"cis","12","Control 12","Network Infrastructure Management",69,{"family":105,"item":106,"code":107,"title":108,"together":109},"nist-sp","800-82","SP 800-82","SP 800-82 Rev. 3: Guide to Operational Technology (OT) Security",62,{"family":111,"item":112,"code":113,"title":114,"together":115},"nist-csf","pr-ac","PR.AC-1","Identity Management, Authentication and Access Control (CSF 1.1)",40,{"family":99,"item":117,"code":118,"title":119,"together":120},"13","Control 13","Network Monitoring and Defense",36,{"family":122,"item":123,"code":124,"title":125,"together":126},"iec-62443","3-3","62443-3-3","IEC 62443-3-3: System security requirements and security levels",31,{"family":5,"item":128,"code":129,"title":130,"together":131},"cip-007","CIP-007-6","CIP-007: Systems Security Management",21,{"family":99,"item":133,"code":134,"title":135,"together":136},"4","Control 4","Secure Configuration of Enterprise Assets and Software",19,{"family":122,"item":138,"code":139,"title":140,"together":136},"overview","62443","IEC 62443 series"]