CIP-006-6 Table R1 Physical Security Plan – Part Applicable Systems Requirements Measures 1.7 Physical Access Control Issue an alarm or alert in An example of evidence may Systems (PACS) associated response to detected include, but is not limited to, with: unauthorized physical access language in the physical security to a Physical Access Control plan that describes the issuance of High Impact BES Cyber System to the personnel an alarm or alert in response to Systems, or identified in the BES Cyber unauthorized physical access to Medium Impact BES Security Incident response Physical Access Control Systems Cyber Systems with plan within 15 minutes of the and additional evidence that the External Routable detection. alarm or alerts was issued and Connectivity communicated as identified in the BES Cyber Security Incident Response Plan, such as alarm or alert logs, cell phone or pager logs, or other evidence that the alarm or alert was generated and communicated. Registered Entity Response (Required): Describe, in narrative form, how you meet compliance with this requirement. Registered Entity Evidence (Required): The following information is requested for each document submitted as evidence. Also, evidence submitted should be highlighted and bookmarked, as appropriate, to identify the location where evidence of compliance may be found. File Name Document Title Revision Document Relevant Description of Applicability or Date Page(s) of Document Version or Section(s) Team Evidence Reviewed (This section to be completed by the Compliance Monitor Administrator): Compliance Assessment Approach Specific to Part 1.7 This section to be completed by the Compliance Monitor Administrator
CIP-006-6 Table R1 – Physical Security Plan Part Applicable Systems Requirements Measures 1.7 Physical Access Control Systems (PACS) associated with: High Impact BES Cyber Systems, or Medium Impact BES Cyber Systems with External Routable Connectivity Issue an alarm or alert in response to detected unauthorized physical access to a Physical Access Control System to the personnel identified in the BES Cyber Security Incident response plan within 15 minutes of the detection. An example of evidence may include, but is not limited to, language in the physical security plan that describes the issuance of an alarm or alert in response to unauthorized physical access to Physical Access Control Systems and additional evidence that the alarm or alerts was issued and communicated as identified in the BES Cyber Security Incident Response Plan, such as alarm or alert logs, cell phone or pager logs, or other evidence that the alarm or alert was generated and communicated. Registered Entity Response (Required): Describe, in narrative form, how you meet compliance with this requirement. Registered Entity Evidence (Required): The following information is requested for each document submitted as evidence. Also, evidence submitted should be highlighted and bookmarked, as appropriate, to identify the location where evidence of compliance may be found. File Name Document Title Revision or Version Document Date Relevant Page(s) or Section(s) Description of Applicability of Document Team Evidence Reviewed (This section to be completed by the Compliance Monitor Administrator): Compliance Assessment Approach Specific to Part 1.7 This section to be completed by the Compliance Monitor Administrator
RSAW%20CIP-006-6_BC.docx