Requirement:

The asset owner shall have policies and procedures to harden components prior to their use in the IACS to protect their software and hardware features, to maintain the hardened state during the lifetime of the components and to maintain the documentation of hardening items, means and procedures of the components.

Guidance: