Requirement:

If external network connections are not necessary for essential functions, the asset owner shall have policies and procedures around the ability to disconnect the IACS from external networks to protect itself or the external networks from actual or suspected threats.

Guidance: