NERC CIP-014 Substation Physical Security Patrol
Document substation perimeter patrols, camera coverage, lighting, and intrusion detection in one NERC CIP-014 inspection form. Use it to record physical security conditions, flag deficiencies, and trigger follow-up on critical findings.
Trusted by frontline teams 15 years of frontline software AI customization in seconds
Built for: Electric Utilities · Transmission And Distribution · Critical Infrastructure
Overview
This template is a field-ready inspection form for documenting physical security patrols at a critical transmission substation. It walks the inspector through the site in the same order a real patrol would follow: inspection details, perimeter barriers and access control, cameras and surveillance coverage, lighting and visibility, intrusion detection and alarm conditions, then findings and sign-off.
Use it when your team needs a consistent record of what was checked, what was observed, and whether any deficiency or non-conformance needs escalation. It is especially useful for routine patrols, post-event inspections after storms or construction activity, and follow-up checks after an alarm, tamper alert, or suspicious activity report. The template is designed to capture observable conditions such as broken fencing, forced gates, obstructed camera views, dark spots, damaged fixtures, or sensor bypass indicators.
Do not use it as a substitute for a formal security plan, engineering assessment, or maintenance work order system. It is also not the right tool for general electrical safety inspections, energized work permits, or equipment condition checks unrelated to physical security. If a site has no perimeter controls, no surveillance, or no intrusion detection, the template still works, but those sections should be marked accurately and the gap escalated through the proper channel. The goal is a clear patrol record that supports timely corrective action and gives reviewers enough detail to understand the security posture at the time of inspection.
Standards & compliance context
- This template supports physical security documentation commonly expected under NERC CIP-014 programs for critical transmission substations.
- The barrier, access control, camera, lighting, and alarm checks align with general security and asset-protection practices used in utility physical security plans.
- If the site uses intrusion detection, surveillance, or emergency lighting, the patrol record can help demonstrate ongoing verification consistent with applicable NFPA, ANSI, and utility security requirements.
- For sites with broader safety management programs, the form can also support audit trails used in ISO 9001-style corrective action tracking and internal compliance reviews.
General regulatory context for orientation only — verify current requirements with counsel or the relevant agency before relying on this template for compliance.
What's inside this template
Inspection Details
This section establishes who inspected the site, when the patrol occurred, and under what conditions the observations were made.
- Substation name / asset ID recorded
- Inspection date and time recorded
- Inspector name and role recorded
- Patrol type selected
- Weather and visibility conditions documented
Perimeter Barriers and Access Control
This section matters because fence, wall, gate, and signage conditions are the first line of defense against unauthorized entry.
- Perimeter fence or wall is intact with no breaches, gaps, or climb points
- Gates are closed, secured, and show no signs of forced entry
- Locks, latches, hinges, and hardware are functional and undamaged
- Access points are free of unauthorized vehicles, debris, or objects that could aid entry
- Warning signs and restricted access signage are present and legible
- Evidence of tampering, cut fencing, pry marks, or suspicious activity observed
Cameras and Surveillance Coverage
This section verifies that the site can actually observe and record critical access points and perimeter activity.
- Cameras covering perimeter and access points are powered and operational
- Camera views are unobstructed and provide usable coverage of critical areas
- Camera housings, mounts, lenses, and cabling show no visible damage
- Video recording or monitoring status is normal
- Time/date stamp or system clock is accurate within site tolerance
- Any camera blind spots or outages documented
Lighting and Visibility
This section identifies dark spots and equipment failures that can hide intrusion attempts or reduce camera effectiveness.
- Perimeter and yard lighting is functioning at normal operating level
- Dark spots or shadowed areas that reduce security visibility are absent or documented
- Lighting fixtures, poles, lenses, and controls show no visible damage
- Emergency or backup lighting, if installed, appears functional
- Vegetation, snow, dirt, or obstructions are not blocking light output
Intrusion Detection and Alarm Conditions
This section confirms that sensors and alarm components are powered, intact, and not showing signs of bypass or fault.
- Intrusion detection devices appear powered and in normal status
- Sensors, conduits, enclosures, and associated hardware show no visible damage
- Alarm indications, trouble signals, or fault conditions are absent or documented
- Evidence of bypass, tampering, or sensor obstruction observed
Patrol Findings and Sign-Off
This section turns observations into action by documenting deficiencies, immediate responses, notifications, and final accountability.
- Deficiencies or non-conformances documented with location and detail
- Immediate corrective or protective actions taken
- Supervisor or control center notified for critical findings
- Inspector signature
How to use this template
- 1. Enter the substation name or asset ID, inspection date and time, inspector identity, patrol type, and weather or visibility conditions before starting the walk-through.
- 2. Walk the perimeter in a fixed route and record the condition of fences, walls, gates, locks, signage, and any evidence of tampering, unauthorized vehicles, or entry aids.
- 3. Verify each camera covering the perimeter and access points for power, usable view, physical damage, recording status, clock accuracy, and any blind spots or outages.
- 4. Check lighting and visibility around the yard and perimeter, noting dark areas, damaged fixtures, blocked lenses, or vegetation and debris that reduce coverage.
- 5. Review intrusion detection and alarm indicators for normal status, visible damage, bypass signs, or sensor obstruction, then document any deficiency with location and detail.
- 6. Complete the findings section with immediate actions taken, notify the supervisor or control center for critical issues, and sign off only after the record is complete and legible.
Best practices
- Use a fixed patrol route so each inspection covers the same fence lines, gates, cameras, lights, and alarm points in the same order.
- Record exact locations for every deficiency, such as gate number, fence segment, camera ID, or pole location, so maintenance can find the issue quickly.
- Treat forced entry, cut fencing, pry marks, disabled alarms, and camera outages as critical items and escalate them immediately.
- Photograph defects at the time of inspection, especially damaged hardware, blind spots, and tamper evidence, before conditions change.
- Note weather, snow, fog, glare, and low-light conditions because they can create temporary visibility problems that look like equipment failures.
- Separate security findings from maintenance issues so a broken light, an obstructed camera, and a breached fence are each tracked to the right owner.
- Verify the system clock or time stamp on surveillance equipment during the patrol so recorded events can be matched to alarm logs and incident timelines.
What this template typically catches
Issues teams running this template most often surface in practice:
Common use cases
Frequently asked questions
What does this patrol template cover?
This template covers the physical security conditions that matter at a critical transmission substation: perimeter barriers, gates, locks, signage, cameras, lighting, and intrusion detection. It also includes inspection details and a sign-off section so the patrol record is traceable. Use it to document what was observed, where it was observed, and what action was taken for any deficiency or non-conformance.
When should this inspection be performed?
Use it on the patrol cadence defined by your site security plan, risk assessment, or utility procedure. Many teams run it on a routine schedule and also after storms, construction activity, alarm events, or any report of suspicious activity. The template works for both normal patrols and event-driven checks.
Who should complete the patrol?
A trained security officer, substation technician, or other designated inspector can complete it, as long as they understand site access rules and what counts as a critical item. For findings that affect energized equipment or require entry into restricted areas, the inspector should follow site authorization and escalation procedures. The form is also useful when a supervisor reviews and signs off on critical findings.
How does this relate to NERC CIP-014?
CIP-014 focuses on identifying and protecting critical transmission stations and substations against physical attacks. This template helps document the observable controls that support that program, such as barriers, surveillance, lighting, and intrusion detection. It is a recordkeeping and field-verification tool, not a substitute for the site’s formal security plan or risk assessment.
What are the most common mistakes when using this template?
The biggest mistake is writing vague notes like 'fence OK' instead of describing the exact location and condition of the deficiency. Another common issue is failing to document blind spots, camera outages, or temporary obstructions that reduce coverage. Teams also miss the follow-up step, so the form should capture who was notified and what immediate protective action was taken.
Can this template be customized for different substations?
Yes. You can add site-specific fence lines, camera IDs, gate numbers, alarm panel locations, or patrol routes without changing the core inspection logic. If a site has unique risks such as adjacent public access, construction staging, or vegetation encroachment, add those as checklist items or notes fields.
How should critical findings be handled?
Any sign of forced entry, tampering, a breached barrier, or a disabled alarm should be treated as a critical finding and escalated immediately. The template includes fields for immediate corrective or protective actions and supervisor or control center notification. That helps preserve evidence and reduces the chance that a security gap is left open after the patrol ends.
Does this template replace camera or alarm system logs?
No. It complements system logs by capturing the physical condition and field-observed status of the security controls at the time of the patrol. If the camera or alarm system shows a fault, the patrol record should reference the issue and tie it to the appropriate maintenance, security, or monitoring log.
Related templates
Go deeper on the topic
-
Predictive scheduling laws — also called fair workweek laws or secure scheduling — require employers in covered industries to publish employee schedules...
-
Overtime calculation is the process of applying federal, state, local, and contractual rules to hours worked to determine the correct pay — including...
-
A near-miss is an event that could have caused injury or damage but didn't — a slip that didn't fall, a load that shifted but didn't drop, a machine that...
-
Lockout/tagout (LOTO) is the procedure for controlling hazardous energy — electrical, hydraulic, pneumatic, mechanical, thermal, chemical — before...
-
See how MangoApps Forms helps teams collect, track, and analyze employee data in real time — with mobile access, file uploads, and enterprise-grade security.
-
MangoApps Shifts & Schedules unifies frontline scheduling, time, and leave management in one native platform for faster, simpler operations.
-
Software bloat warning signs explained—spot bloated software early and choose leaner tools that boost performance, adoption, and ROI.
-
Compare on-premise vs SaaS intranet TCO with MangoApps and uncover the true 5-10 year cost to choose smarter.
Ready to use this template?
Get started with MangoApps and use NERC CIP-014 Substation Physical Security Patrol with your team — pricing built for small business.
