Requirements R4 and R5; Standard Standard CIP-008-3; and Standard CIP-009-3. R2.1. Be protected from unauthorized N/A N/A N/A N/A physical access. Be afforded the protective R2.2. N/A N/A N/A N/A measures specified in Standard CIP-003-3; Standard CIP-004-3 Requirement R3; Standard Requirements R2 and R3; Standard CIP-006-3a Requirements R4 and R5; Standard CIP-007-3; Standard CIP-008-3; and Standard R3 Protection of Electronic Access N/A N/A N/A A Cyber Assets used in Control Systems Cyber Assets the access control — used in the access control and/or and/or monitoring of monitoring of the Electronic the Electronic Security Security Perimeter(s) shall reside Perimeter(s) does not within an identified Physical reside within an Security Perimeter. identified Physical Security Perimeter. R4 Physical Access Controls The N/A N/A N/A The Responsible Entity — Responsible Entity shall has not documented or document and implement the has not implemented operational and procedural the operational and controls to manage physical procedural controls to access at all access points to the manage physical access Physical Security Perimeter(s) at all access points to twenty-four hours a day, seven the Physical Security days a week. The Responsible Perimeter(s) Entity shall implement one or hours a day, seven days a week using one
Requirements R4 and R5; Standard Standard CIP-008-3; and Standard CIP-009-3. R2.1. Be protected from unauthorized physical access. N/A N/A N/A N/A R2.2. Be afforded the protective measures specified in Standard CIP-003-3; Standard CIP-004-3 Requirement R3; Standard Requirements R2 and R3; Standard CIP-006-3a Requirements R4 and R5; Standard CIP-007-3; Standard CIP-008-3; and Standard N/A N/A N/A N/A R3 Protection of Electronic Access Control Systems — Cyber Assets used in the access control and/or monitoring of the Electronic Security Perimeter(s) shall reside within an identified Physical Security Perimeter. N/A N/A N/A A Cyber Assets used in the access control and/or monitoring of the Electronic Security Perimeter(s) does not reside within an identified Physical Security Perimeter. R4 Physical Access Controls — The Responsible Entity shall document and implement the operational and procedural controls to manage physical access at all access points to the Physical Security Perimeter(s) twenty-four hours a day, seven days a week. The Responsible Entity shall implement one or N/A N/A N/A The Responsible Entity has not documented or has not implemented the operational and procedural controls to manage physical access at all access points to the Physical Security Perimeter(s) hours a day, seven days a week using one
VSL_Matrix_Complete_2016_01_27.docx