iec62443-4-2-FR-7

Req ID

Requirement name

Supported by CIP

Need ap plication support

Need HW solution

Status if supported by CIP

CR-7.1

Denial of service protection

TRUE

TRUE

FALSE

Completed Added package nftables

CR-7.1 RE(1)

Manage communication load from component

TRUE

TRUE

FALSE

Completed Added package nftables

CR-7.2

Resource managemnt

FALSE

TRUE

FALSE

N.A.

CR-7.3

Control system backup

TRUE

FALSE

FALSE

in-progress Adding backup/restore package

CR-7.3 RE(1)

Backup integrity verification

TRUE

FALSE

FALSE

in-progress Adding backup/restore package

CR-7.4

Control system recovery and reconstitution

TRUE

TRUE

FALSE

in-progress Adding backup/restore package

CR-7.5

Emergency power

FALSE

FALSE

FALSE

N.A.

CR-7.6

Network and security conf iguration settings

FALSE

TRUE

FALSE

N.A.

CR-7.6 RE(1)

Machine -readable reporting of current security settings

FALSE

TRUE

FALSE

N.A.

CR-7.7

Least functionality

FALSE

TRUE

FALSE

N.A.

CR-7.8

Control system component inventory

FALSE

TRUE

FALSE

N.A.

Tests reference and CIP recommendation

Req ID

Status if supported by CIP

IEC-62443-4-2 tests reference

CIP recommendation

CR-7.1

Completed Added package nftables

TC_CR7. 1_1

CIP supports this requirement.CIP users should do CRT (communication Robustness Testing) to meet this requirement.

CR-7.1 RE(1)

Completed Added package nftables

None

CIP supports this requirement.CIP users should use CIP package and make sure in case of DoS attack essential function of the system is not affected and system runs in degraded mode with essential services

CR-7.2

N.A.

None

CIP platform does not support this requirementCIP users should make sure monitoring of system does not affect essential functions of the system

CR-7.3

in-progress Adding backup/restore package

None

CIP supports this requirement.CIP users should use the package and configure based on this requirement

CR-7.3 RE(1)

in-progress Adding backup/restore package

None

Same as CR-7.3

CR-7.4

in-progress Adding backup/restore package

None

Same as CR-7.3

CR-7.5

N.A.

None

No component level requirement

CR-7.6

N.A.

None

CIP does not support this requirementCIP users should provide setting to configure network and security settings based on the product uses cases

CR-7.6 RE(1)

N.A.

None

Same as CR-7.6

CR-7.7

N.A.

None

CIP platform does not support this requirement.CIP users should use CIP capabilities and support it.

CR-7.8

N.A.

None

Same as CR-7.7