Requirement:

If external network connections are not necessary for essential functions, the asset owner shall have policies and procedures around the ability to operate the IACS as designed when disconnected from external networks (for example, fail-safe operation, safe shut down, restricted operation and normal operation).

Guidance: