In case your application requires your buyers to enter their info on their very own units, then you qualify for SAQ A. Create firewalls and router criteria, which set policies for letting and denying entry to your techniques. Firewall configurations ought to be reviewed bi-every year to make sure there https://www.nathanlabsadvisory.com/nerc-cip-compliance.html