R1 Part 1.7 CIP-006-6 Table R1 Physical Security Plan – Part Applicable Systems Requirements Measures 1.7 Physical Access Control Systems Issue an alarm or alert in response to An example of evidence may include, but is (PACS) associated with: detected unauthorized physical not limited to, language in the physical access to a Physical Access Control security plan that describes the issuance of High Impact BES Cyber System to the personnel identified in an alarm or alert in response to Systems, or the BES Cyber Security Incident unauthorized physical access to Physical Medium Impact BES Cyber response plan within 15 minutes of Access Control Systems and additional Systems with External the detection. evidence that the alarm or alerts was issued Routable Connectivity and communicated as identified in the BES Cyber Security Incident Response Plan, such as alarm or alert logs, cell phone or pager logs, or other evidence that the alarm or alert was generated and communicated. Registered Entity Response (Required): Compliance Narrative: Provide a brief explanation, in your own words, of how you comply with this Requirement. References to supplied evidence, including links to the appropriate page, are recommended. Registered Entity Evidence (Required): The following information is requested for each document submitted as evidence. Also, evidence submitted should be highlighted and bookmarked, as appropriate, to identify the exact location where evidence of compliance may be found. Relevant Revision Page(s) Description of or Document or Applicability of File Name Document Title Version Date Section(s) Document Audit Team Evidence Reviewed (This section to be completed by the Compliance Enforcement Authority): Compliance Assessment Approach Specific to CIP-006-6, R1, Part 1.7 This section to be completed by the Compliance Enforcement Authority Verify the Responsible Entity has documented one or more physical security plans to issue an
R1 Part 1.7 CIP-006-6 Table R1 – Physical Security Plan Part Applicable Systems Requirements Measures 1.7 Physical Access Control Systems (PACS) associated with: High Impact BES Cyber Systems, or Medium Impact BES Cyber Systems with External Routable Connectivity Issue an alarm or alert in response to detected unauthorized physical access to a Physical Access Control System to the personnel identified in the BES Cyber Security Incident response plan within 15 minutes of the detection. An example of evidence may include, but is not limited to, language in the physical security plan that describes the issuance of an alarm or alert in response to unauthorized physical access to Physical Access Control Systems and additional evidence that the alarm or alerts was issued and communicated as identified in the BES Cyber Security Incident Response Plan, such as alarm or alert logs, cell phone or pager logs, or other evidence that the alarm or alert was generated and communicated. Registered Entity Response (Required): Compliance Narrative: Provide a brief explanation, in your own words, of how you comply with this Requirement. References to supplied evidence, including links to the appropriate page, are recommended. Registered Entity Evidence (Required): The following information is requested for each document submitted as evidence. Also, evidence submitted should be highlighted and bookmarked, as appropriate, to identify the exact location where evidence of compliance may be found. File Name Document Title Revision or Version Document Date Relevant Page(s) or Section(s) Description of Applicability of Document Audit Team Evidence Reviewed (This section to be completed by the Compliance Enforcement Authority): Compliance Assessment Approach Specific to CIP-006-6, R1, Part 1.7 This section to be completed by the Compliance Enforcement Authority Verify the Responsible Entity has documented one or more physical security plans to issue an
RSAW%20CIP-006-6_2015_v1.docx