Requirement:

The asset owner shall have policies and procedures related to protecting the IACS from resource/equipment failures due to power disruptions, unintentional capacity/processing overloads, hardware failures and intentional DoS attacks. These policies and procedures shall also consider remediation actions, such as device replacement.

Guidance: