R2 - Remote Access Management

CIP-005 Requirement 2 focuses on remote access management for bulk-electric-system assets. It obliges entities to create, document and enforce policies that control remote connections, specifying authentication, authorization and monitoring procedures so that only authorized users can access critical systems.