NERC CIP Physical Access Control Log - Substation

Inspection template for documenting personnel entry, authorization, escort status, and perimeter access controls at a substation housing BES Cyber Systems for NERC CIP-006 evidence.

Inspection Details

• Substation name / identifier recorded
• Inspection date and time recorded
• Inspector name and role recorded
• Reference scope confirmed for substation physical security perimeter
  Confirm the inspection applies to the physical security perimeter controlling access to BES Cyber Systems.
• Inspection evidence package attached
  Attach supporting photos or scans of the access log pages, badge records, or perimeter evidence as applicable.

Access Log Completeness

• All entries include date and time of access
• Each entry identifies the person entering the substation
• Authorization status documented for each entry
• Entry purpose or work order reference recorded
• Access log entries are legible, sequential, and complete

Authorization and Escort Verification

• Unescorted access limited to authorized personnel only
• Visitors and contractors were escorted when required
• Escort name and badge/identifier recorded for escorted entries
• Authorization method verified against approved access list
• Any unauthorized or unverified entry identified

Physical Security Perimeter Controls

• Perimeter access points secured and controlled
• Badge reader, key, or other access mechanism functioning as intended
• Tailgating or piggybacking controls observed at entry point
• Perimeter signage indicates access restrictions and authorization requirements
• Any perimeter breach, forced entry, or damaged control identified

Record Retention and Evidence Quality

• Access records retained for the required retention period
• Log format supports audit traceability from entry to authorization
• Exceptions, discrepancies, or missing records documented
• Corrective actions assigned for deficiencies

Inspector Sign-Off

• Overall inspection result
• Inspector signature