CIP-006-5 Table R1 Physical Security Plan – Part Applicable Systems Requirements Measures 1.3 High Impact BES Cyber Systems Where technically feasible, utilize An example of evidence may include, and their associated: two or more different physical but is not limited to, language in the access controls (this does not physical security plan that describes the EACMS; and require two completely Physical Security Perimeters and how PCA independent physical access unescorted physical access is controlled control systems) to collectively by two or more different methods and allow unescorted physical access proof that unescorted physical access is into Physical Security Perimeters restricted to only authorized individuals, to only those individuals who such as a list of authorized individuals have authorized unescorted accompanied by access logs. physical access. Registered Entity Response (Required): Describe, in narrative form, how you meet compliance with this requirement. Registered Entity Evidence (Required): The following information is requested for each document submitted as evidence. Also, evidence submitted should be highlighted and bookmarked, as appropriate, to identify the exact location where evidence of compliance may be found. File Name Document Title Revision Document Relevant Description of Applicability or Date Page(s) of Document Version or Section(s) Audit Team Evidence Reviewed (This section to be completed by the Compliance Monitor Administrator): Compliance Assessment Approach Specific to Part 1.3 This section to be completed by the Compliance Monitor Administrator Verify the Responsible Entity has documented one or more physical security plans that utilize two or more different physical access controls (this does not require two completely independent physical access control systems) to collectively allow unescorted physical access into Physical Security Perimeters to only those individuals who have authorized unescorted physical access, where technically feasible. Verify that each Physical Security Perimeter has at least two physical access control. Verify that only individuals with authorized unescorted physical access are allowed authorized unescorted physical access into each applicable Physical Security Perimeter.
CIP-006-5 Table R1 – Physical Security Plan Part Applicable Systems Requirements Measures 1.3 High Impact BES Cyber Systems and their associated: EACMS; and PCA Where technically feasible, utilize two or more different physical access controls (this does not require two completely independent physical access control systems) to collectively allow unescorted physical access into Physical Security Perimeters to only those individuals who have authorized unescorted physical access. An example of evidence may include, but is not limited to, language in the physical security plan that describes the Physical Security Perimeters and how unescorted physical access is controlled by two or more different methods and proof that unescorted physical access is restricted to only authorized individuals, such as a list of authorized individuals accompanied by access logs. Registered Entity Response (Required): Describe, in narrative form, how you meet compliance with this requirement. Registered Entity Evidence (Required): The following information is requested for each document submitted as evidence. Also, evidence submitted should be highlighted and bookmarked, as appropriate, to identify the exact location where evidence of compliance may be found. File Name Document Title Revision or Version Document Date Relevant Page(s) or Section(s) Description of Applicability of Document Audit Team Evidence Reviewed (This section to be completed by the Compliance Monitor Administrator): Compliance Assessment Approach Specific to Part 1.3 This section to be completed by the Compliance Monitor Administrator Verify the Responsible Entity has documented one or more physical security plans that utilize two or more different physical access controls (this does not require two completely independent physical access control systems) to collectively allow unescorted physical access into Physical Security Perimeters to only those individuals who have authorized unescorted physical access, where technically feasible. Verify that each Physical Security Perimeter has at least two physical access control. Verify that only individuals with authorized unescorted physical access are allowed authorized unescorted physical access into each applicable Physical Security Perimeter.
RSAW_CIP-006-5_BC.docx