CIP-006-6: physical security plans and Physical Security Perimeters, visitor control, and maintenance and testing of Physical Access Control Systems.
The documented physical security plan: access controls into the Physical Security Perimeter (two or more different controls for high impact), alarms within 15 minutes, access logging with 90-day retention, and protection of cabling outside the perimeter.
Continuous escort of visitors inside Physical Security Perimeters, visitor logs with entry and exit times and the point of contact, and 90-day log retention.
Maintenance and testing, at least every 24 calendar months, of each Physical Access Control System and the locally mounted devices at the Physical Security Perimeter.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.