IACS UR E27: Cyber resilience of on-board systems and equipment control library
Every control CMDash tracks for IACS UR E27: Cyber resilience of on-board systems and equipment, in the order the standard itself uses. Each one is a row in the product with an owner, a status, evidence and its own history.
Families
Documentation · 10
| 3.1.1 | CBS asset inventory supplied with the hardware and software attribute sets Maps to ISO/IEC 27001:2022, NIST Cybersecurity Framework 2.0 |
| 3.1.2 | Physical and logical topology diagrams supplied for the CBS Maps to ISO/IEC 27001:2022 |
| 3.1.3 | Security capability description covers each requirement, interfaces, compensations |
| 3.1.4 | Test procedure shows by test how the CBS meets each capability |
| 3.1.5 | Security configuration guidelines state recommended settings and defaults Maps to ISO/IEC 27001:2022, NIST Cybersecurity Framework 2.0 |
| 3.1.6 | Secure development lifecycle documents available on request |
| 3.1.7 | Maintenance and verification plan includes how users check security functions |
| 3.1.8 | Information supporting the owner incident response and recovery plans Maps to NIST Cybersecurity Framework 2.0 |
| 3.1.9 | Management of change plan available on request |
| 3.1.10 | Signed supplier test reports for type-approved CBSs |
Security capabilities (all CBSs) · 30
Security capabilities (untrusted networks) · 11
| T2-01 | Require multi-factor authentication for human access via untrusted networks Maps to ISO/IEC 27001:2022, NIS2, NIST Cybersecurity Framework 2.0 |
| T2-02 | Identify and authenticate software processes and devices Maps to ISO/IEC 27001:2022 |
| T2-03 | Limit consecutive failed logins from untrusted networks |
| T2-04 | Show a configurable use notice before login |
| T2-05 | Monitor and control all access from untrusted networks Maps to ISO/IEC 27001:2022 |
| T2-06 | Deny untrusted-network access unless approved by authorized staff aboard Maps to ISO/IEC 27001:2022 |
| T2-07 | End remote sessions on inactivity or by the initiating user |
| T2-08 | Detect changes to information using cryptography across untrusted networks |
| T2-09 | Validate input arriving from untrusted networks Maps to ISO/IEC 27001:2022 |
| T2-10 | Protect session integrity and reject invalid session IDs |
| T2-11 | Invalidate session IDs when a session ends |
Secure development lifecycle · 8
Where this comes from
Control identifiers, families and titles are the rows CMDash’s own seed data writes for IACS UR E27: Cyber resilience of on-board systems and equipment Rev.1 (Sep 2023), published from a build-time export rather than read from any customer’s workspace. Cross-framework mappings are CMDash’s own, and each one is shown on both frameworks it connects.
Every control on this page becomes a row with an owner, a status, evidence and an audit trail — with the crosswalks already wired, so evidence mapped once counts in more than one framework.