iec62443-4-2-FR-7
=================

.. contents::

+--------+-------------------------+------------------+---------------------------+------------------+----------------------------+
| Req ID | Requirement name        | Supported        | Need                      | Need HW          | Status if                  | 
|        |                         | by CIP           | ap                        | solution         | supported                  | 
|        |                         |                  | plication                 |                  | by CIP                     | 
|        |                         |                  | support                   |                  |                            |
+========+=========================+==================+===========================+==================+============================+
| CR-7.1 | Denial of               | TRUE             | TRUE                      | FALSE            | Completed Added            |
|        | service                 |                  |                           |                  | package                    |
|        | protection              |                  |                           |                  | nftables                   |
+--------+-------------------------+------------------+---------------------------+------------------+----------------------------+
| CR-7.1 | Manage                  | TRUE             | TRUE                      | FALSE            | Completed Added            |
| RE(1)  | communication load from |                  |                           |                  | package                    |
|        | component               |                  |                           |                  | nftables                   |
+--------+-------------------------+------------------+---------------------------+------------------+----------------------------+
| CR-7.2 | Resource                | FALSE            | TRUE                      | FALSE            | N.A.                       |
|        | managemnt               |                  |                           |                  |                            |
+--------+-------------------------+------------------+---------------------------+------------------+----------------------------+
| CR-7.3 | Control                 | TRUE             | FALSE                     | FALSE            | in-progress                |
|        | system                  |                  |                           |                  | Adding                     |
|        | backup                  |                  |                           |                  | backup/restore package     |
+--------+-------------------------+------------------+---------------------------+------------------+----------------------------+
| CR-7.3 | Backup                  | TRUE             | FALSE                     | FALSE            | in-progress                |
| RE(1)  | integrity               |                  |                           |                  | Adding                     |
|        | verification            |                  |                           |                  | backup/restore package     |
+--------+-------------------------+------------------+---------------------------+------------------+----------------------------+
| CR-7.4 | Control                 | TRUE             | TRUE                      | FALSE            | in-progress                |
|        | system                  |                  |                           |                  | Adding                     |
|        | recovery                |                  |                           |                  | backup/restore package     |
|        | and                     |                  |                           |                  |                            |
|        | reconstitution          |                  |                           |                  |                            |
+--------+-------------------------+------------------+---------------------------+------------------+----------------------------+
| CR-7.5 | Emergency               | FALSE            | FALSE                     | FALSE            | N.A.                       |
|        | power                   |                  |                           |                  |                            |
+--------+-------------------------+------------------+---------------------------+------------------+----------------------------+
| CR-7.6 | Network                 | FALSE            | TRUE                      | FALSE            | N.A.                       |
|        | and                     |                  |                           |                  |                            |
|        | security                |                  |                           |                  |                            |
|        | conf                    |                  |                           |                  |                            |
|        | iguration               |                  |                           |                  |                            |
|        | settings                |                  |                           |                  |                            |
+--------+-------------------------+------------------+---------------------------+------------------+----------------------------+
| CR-7.6 | Machine                 | FALSE            | TRUE                      | FALSE            | N.A.                       |
| RE(1)  | -readable               |                  |                           |                  |                            |
|        | reporting               |                  |                           |                  |                            |
|        | of                      |                  |                           |                  |                            |
|        | current                 |                  |                           |                  |                            |
|        | security                |                  |                           |                  |                            |
|        | settings                |                  |                           |                  |                            |
+--------+-------------------------+------------------+---------------------------+------------------+----------------------------+
| CR-7.7 | Least                   | FALSE            | TRUE                      | FALSE            | N.A.                       |
|        | functionality           |                  |                           |                  |                            |
+--------+-------------------------+------------------+---------------------------+------------------+----------------------------+
| CR-7.8 | Control                 | FALSE            | TRUE                      | FALSE            | N.A.                       |
|        | system                  |                  |                           |                  |                            |
|        | component               |                  |                           |                  |                            |
|        | inventory               |                  |                           |                  |                            |
+--------+-------------------------+------------------+---------------------------+------------------+----------------------------+

Tests reference and CIP recommendation
--------------------------------------

+--------------+----------------------------+-------------------------------+--------------------+
| Req ID       | Status if                  | IEC-62443-4-2                 | CIP                | 
|              | supported by               | tests reference               | recommendation     | 
|              | CIP                        |                               |                    |
+==============+============================+===============================+====================+
| CR-7.1       | Completed Added            | `TC_CR7.                      | CIP supports       |
|              | package                    | 1_1 <https://gi               | this               |
|              | nftables                   | tlab.com/cip-pr               | requirement.CIP    |
|              |                            | oject/cip-testi               | users should do    |
|              |                            | ng/cip-security               | CRT                |
|              |                            | -tests/-/tree/m               | (communication     |
|              |                            | aster/iec-secur               | Robustness         |
|              |                            | ity-tests/singl               | Testing) to        |
|              |                            | enode-testcases               | meet this          |
|              |                            | /TC_CR7.1_1>`__               | requirement.       |
+--------------+----------------------------+-------------------------------+--------------------+
| CR-7.1 RE(1) | Completed Added            | None                          | CIP supports       |
|              | package                    |                               | this               |
|              | nftables                   |                               | requirement.CIP    |
|              |                            |                               | users should       |
|              |                            |                               | use CIP package    |
|              |                            |                               | and make sure      |
|              |                            |                               | in case of DoS     |
|              |                            |                               | attack             |
|              |                            |                               | essential          |
|              |                            |                               | function of the    |
|              |                            |                               | system is not      |
|              |                            |                               | affected and       |
|              |                            |                               | system runs in     |
|              |                            |                               | degraded mode      |
|              |                            |                               | with essential     |
|              |                            |                               | services           |
+--------------+----------------------------+-------------------------------+--------------------+
| CR-7.2       | N.A.                       | None                          | CIP platform       |
|              |                            |                               | does not           |
|              |                            |                               | support this       |
|              |                            |                               | requirementCIP     |
|              |                            |                               | users should       |
|              |                            |                               | make sure          |
|              |                            |                               | monitoring of      |
|              |                            |                               | system does not    |
|              |                            |                               | affect             |
|              |                            |                               | essential          |
|              |                            |                               | functions of       |
|              |                            |                               | the system         |
+--------------+----------------------------+-------------------------------+--------------------+
| CR-7.3       | in-progress Adding         | None                          | CIP supports       |
|              | backup/restore             |                               | this               |
|              | package                    |                               | requirement.CIP    |
|              |                            |                               | users should       |
|              |                            |                               | use the package    |
|              |                            |                               | and configure      |
|              |                            |                               | based on this      |
|              |                            |                               | requirement        |
+--------------+----------------------------+-------------------------------+--------------------+
| CR-7.3 RE(1) | in-progress Adding         | None                          | Same as CR-7.3     |
|              | backup/restore             |                               |                    |
|              | package                    |                               |                    |
+--------------+----------------------------+-------------------------------+--------------------+
| CR-7.4       | in-progress Adding         | None                          | Same as CR-7.3     |
|              | backup/restore             |                               |                    |
|              | package                    |                               |                    |
+--------------+----------------------------+-------------------------------+--------------------+
| CR-7.5       | N.A.                       | None                          | No component       |
|              |                            |                               | level              |
|              |                            |                               | requirement        |
+--------------+----------------------------+-------------------------------+--------------------+
| CR-7.6       | N.A.                       | None                          | CIP does not       |
|              |                            |                               | support this       |
|              |                            |                               | requirementCIP     |
|              |                            |                               | users should       |
|              |                            |                               | provide setting    |
|              |                            |                               | to configure       |
|              |                            |                               | network and        |
|              |                            |                               | security           |
|              |                            |                               | settings based     |
|              |                            |                               | on the product     |
|              |                            |                               | uses cases         |
+--------------+----------------------------+-------------------------------+--------------------+
| CR-7.6 RE(1) | N.A.                       | None                          | Same as CR-7.6     |
+--------------+----------------------------+-------------------------------+--------------------+
| CR-7.7       | N.A.                       | None                          | CIP platform       |
|              |                            |                               | does not           |
|              |                            |                               | support this       |
|              |                            |                               | requirement.CIP    |
|              |                            |                               | users should       |
|              |                            |                               | use CIP            |
|              |                            |                               | capabilities       |
|              |                            |                               | and support it.    |
+--------------+----------------------------+-------------------------------+--------------------+
| CR-7.8       | N.A.                       | None                          | Same as CR-7.7     |
+--------------+----------------------------+-------------------------------+--------------------+