The asset owner shall have policies and procedures related to identifying and authenticating all components connected to the IACS.