Conference · Public demo · No sign-in required

Illustrative Conference Gap Assessment

A configurable starter template covering four recurring control-gap themes.

Use illustrative answers only. Do not enter sensitive operational or personal information. Answers stay in this page and are cleared when you reload or leave it. No evidence upload is required.

Starter content for demonstration and administrator customization; not a compliance determination.

Asset inventory failures

Inventory completeness, ownership, and change reconciliation.

Is there an approved authoritative inventory for in-scope BES Cyber Assets and associated systems?
Are inventory changes reconciled against network discovery and configuration records on a defined cadence?

Electronic Security Perimeter scope mismatches

Do current network diagrams and access-point lists agree on the defined ESP boundary?
Are remote, vendor, wireless, and temporary connectivity paths included in the scope review?

Supply chain documentation gaps

Does the documented procurement process address vendor cyber risk for applicable systems and services?
Are security obligations, notifications, and remote-access expectations evidenced for critical vendors?

Access controls in SCADA environments

Are interactive SCADA access paths attributable to named individuals and approved roles?
Are privileged and shared credentials reviewed, justified, and remediated on a defined cadence?

Illustrative conference-derived content only. Requirement mappings must be reviewed against the entity's applicable, current NERC CIP obligations before use.