physical access to such Cyber identified Physical Assets. Security Perimeter. OR Where a completely enclosed (“six-wall”) border cannot be established, the Responsible Entity has not deployed or documented alternative measures to control physical access to such Cyber Assets within the Electronic Security Perimeter. R1.2. Identification of all physical N/A N/A N/A The Responsible access points through each Entity's physical Physical Security Perimeter and security plan does not measures to control entry at those identify all access access points. points through each Physical Security Perimeter or does not identify measures to control entry at those access points. R1.3 Processes, tools, and procedures N/A N/A N/A The Responsible to monitor physical access to the Entity's physical perimeter(s). security plan does not include processes, tools, and procedures to monitor physical access to the perimeter(s). R1.4 Appropriate use of physical N/A N/A N/A The Responsible access controls as described in Entity's physical Requirement R4 including visitor security plan does not
physical access to such Cyber Assets. identified Physical Security Perimeter. OR Where a completely enclosed (“six-wall”) border cannot be established, the Responsible Entity has not deployed or documented alternative measures to control physical access to such Cyber Assets within the Electronic Security Perimeter. R1.2. Identification of all physical access points through each Physical Security Perimeter and measures to control entry at those access points. N/A N/A N/A The Responsible Entity's physical security plan does not identify all access points through each Physical Security Perimeter or does not identify measures to control entry at those access points. R1.3 Processes, tools, and procedures to monitor physical access to the perimeter(s). N/A N/A N/A The Responsible Entity's physical security plan does not include processes, tools, and procedures to monitor physical access to the perimeter(s). R1.4 Appropriate use of physical access controls as described in Requirement R4 including visitor N/A N/A N/A The Responsible Entity's physical security plan does not