R1 - Protection of Communication Links

CIP-012 R1 sets requirements for protecting the communication links that transport bulk-power system data. It obligates entities to apply security measures such as encryption, authentication, access controls and continuous monitoring to maintain the confidentiality, integrity and availability of these links, and to document and regularly test the effectiveness of the protections.