Requirement:

The asset owner shall have policies and procedures about documenting and maintaining a baseline of all IACS zones and network zone interconnections and/or conduits, the security risks associated with each, their designation as trusted or untrusted, the SL-T and the SPR for each.

Guidance: