CIP-006-5 Table R1 Physical Security Plan – Part Applicable Systems Requirements Measures 1.4 High Impact BES Cyber Systems Monitor for unauthorized access An example of evidence may include, and their associated: through a physical access point but is not limited to, documentation of into a Physical Security controls that monitor for unauthorized and Perimeter. access through a physical access point PCA into a Physical Security Perimeter. Medium Impact BES Cyber Systems with External Routable Connectivity and their associated: and PCA Registered Entity Response (Required): Describe, in narrative form, how you meet compliance with this requirement. Registered Entity Evidence (Required): The following information is requested for each document submitted as evidence. Also, evidence submitted should be highlighted and bookmarked, as appropriate, to identify the exact location where evidence of compliance may be found. File Name Document Title Revision Document Relevant Description of Applicability or Date Page(s) of Document Version or Section(s) Audit Team Evidence Reviewed (This section to be completed by the Compliance Monitor Administrator): Compliance Assessment Approach Specific to Part 1.4 This section to be completed by the Compliance Monitor Administrator Verify the Responsible Entity has documented one or more physical security plans to monitor for unauthorized access through a physical access point into a Physical Security Perimeter. Verify that the Responsible Entity monitors for unauthorized access through a physical access into a Physical Security Perimeter. CIP-006-5 Table R1 Physical Security Plan –
CIP-006-5 Table R1 – Physical Security Plan Part Applicable Systems Requirements Measures 1.4 High Impact BES Cyber Systems and their associated: and PCA Medium Impact BES Cyber Systems with External Routable Connectivity and their associated: and PCA Monitor for unauthorized access through a physical access point into a Physical Security Perimeter. An example of evidence may include, but is not limited to, documentation of controls that monitor for unauthorized access through a physical access point into a Physical Security Perimeter. Registered Entity Response (Required): Describe, in narrative form, how you meet compliance with this requirement. Registered Entity Evidence (Required): The following information is requested for each document submitted as evidence. Also, evidence submitted should be highlighted and bookmarked, as appropriate, to identify the exact location where evidence of compliance may be found. File Name Document Title Revision or Version Document Date Relevant Page(s) or Section(s) Description of Applicability of Document Audit Team Evidence Reviewed (This section to be completed by the Compliance Monitor Administrator): Compliance Assessment Approach Specific to Part 1.4 This section to be completed by the Compliance Monitor Administrator Verify the Responsible Entity has documented one or more physical security plans to monitor for unauthorized access through a physical access point into a Physical Security Perimeter. Verify that the Responsible Entity monitors for unauthorized access through a physical access into a Physical Security Perimeter. CIP-006-5 Table R1 – Physical Security Plan
RSAW_CIP-006-5_BC.docx