NERC CIP Physical Access Control Log - Substation
Use this substation physical access control log to document who entered, why they entered, whether they were authorized or escorted, and whether perimeter controls were intact. It helps you build NERC CIP-006 evidence without relying on ad hoc notes.
Trusted by frontline teams 15 years of frontline software AI customization in seconds
Built for: Electric Utilities · Transmission And Distribution · Substation Operations · Critical Infrastructure
Overview
This NERC CIP Physical Access Control Log - Substation template is built to document entry into a substation, confirm whether each person was authorized or escorted, and record the condition of the physical security perimeter. It gives you a single inspection record for access log completeness, authorization verification, perimeter control checks, record retention, and inspector sign-off.
Use it when you need evidence that substation access was controlled and traceable, especially for sites housing BES Cyber Systems. It is useful during routine compliance inspections, contractor visits, after access-control failures, and when assembling an audit package. The template is also helpful when you need to connect a specific entry to an approved access list, work order, or escort record.
Do not use it as a generic visitor sheet or for locations that do not require physical security evidence. It is not meant to replace badge system reports, key control procedures, or incident response records. If your site has no perimeter controls, no restricted access, or no need to verify authorization, this template is the wrong fit. It works best when the inspection is focused on observable evidence: who entered, how access was granted, whether escort rules were followed, and whether the perimeter was secure at the time of review.
Standards & compliance context
- This template supports evidence collection for NERC CIP physical security expectations by documenting controlled access, escort verification, and perimeter protection at substations with BES Cyber Systems.
- The inspection fields align with common audit expectations under utility security programs and can be paired with approved access lists, badge reports, and key control procedures.
- Perimeter checks and breach documentation help support broader physical security obligations that are often reviewed alongside NERC CIP and internal critical-infrastructure controls.
- If your organization also follows ANSI/ASSP or ISO 9001-style corrective action processes, the deficiency and action fields help preserve traceability from finding to closure.
General regulatory context for orientation only — verify current requirements with counsel or the relevant agency before relying on this template for compliance.
What's inside this template
Inspection Details
This section anchors the record to the correct substation, date, inspector, and evidence package so the inspection can be traced later.
- Substation name / identifier recorded
- Inspection date and time recorded
- Inspector name and role recorded
-
Reference scope confirmed for substation physical security perimeter
Confirm the inspection applies to the physical security perimeter controlling access to BES Cyber Systems.
-
Inspection evidence package attached
Attach supporting photos or scans of the access log pages, badge records, or perimeter evidence as applicable.
Access Log Completeness
This section checks whether every entry contains the minimum details needed to prove who entered, when, and why.
- All entries include date and time of access
- Each entry identifies the person entering the substation
- Authorization status documented for each entry
- Entry purpose or work order reference recorded
- Access log entries are legible, sequential, and complete
Authorization and Escort Verification
This section confirms that access was limited to approved personnel and that escort rules were followed where required.
- Unescorted access limited to authorized personnel only
- Visitors and contractors were escorted when required
- Escort name and badge/identifier recorded for escorted entries
- Authorization method verified against approved access list
- Any unauthorized or unverified entry identified
Physical Security Perimeter Controls
This section documents the condition and effectiveness of gates, readers, locks, signage, and anti-tailgating controls.
- Perimeter access points secured and controlled
- Badge reader, key, or other access mechanism functioning as intended
- Tailgating or piggybacking controls observed at entry point
- Perimeter signage indicates access restrictions and authorization requirements
- Any perimeter breach, forced entry, or damaged control identified
Record Retention and Evidence Quality
This section shows whether the log can survive an audit by proving records are retained, traceable, and complete.
- Access records retained for the required retention period
- Log format supports audit traceability from entry to authorization
- Exceptions, discrepancies, or missing records documented
- Corrective actions assigned for deficiencies
Inspector Sign-Off
This section captures the final result and accountability for the inspection outcome.
- Overall inspection result
- Inspector signature
How to use this template
- Enter the substation name, inspection date and time, inspector identity, and the exact scope so the record clearly ties to the correct physical security perimeter.
- Review the access log line by line and confirm that each entry includes the date, time, person entering, authorization status, and purpose or work order reference.
- Verify escorted entries against the approved access list and record the escort name or identifier whenever a visitor, contractor, or unescorted restriction applies.
- Walk the perimeter access points and document whether gates, locks, badge readers, keys, signage, and anti-tailgating controls are functioning and intact.
- Note every exception, discrepancy, missing record, or suspected unauthorized entry, then assign corrective actions with enough detail to support follow-up.
- Complete the sign-off only after the evidence package is attached and the overall result reflects the actual condition of the substation access controls.
Best practices
- Record the exact time of access, not just the date, so the log can be matched to badge system output or camera footage.
- Tie every entry to a purpose, work order, or maintenance reference to show why the person was on site.
- Verify authorization against the current approved access list before you mark an entry complete.
- Photograph damaged locks, forced entry points, broken readers, or missing signage at the time of inspection.
- Treat tailgating and piggybacking as observable deficiencies, not informal observations, and document where they occurred.
- Keep escorted and unescorted entries clearly separated so reviewers can see who required supervision.
- Document missing records as findings, not as blank fields, so the audit trail shows the gap and the response.
What this template typically catches
Issues teams running this template most often surface in practice:
Common use cases
Frequently asked questions
What is this template used for?
This template records substation entry details, authorization status, escort requirements, and physical perimeter control checks in one place. It is designed to produce audit-ready evidence for substations that house BES Cyber Systems. Use it when you need a repeatable log that ties each entry to an approved access basis. It also helps document exceptions, missing records, and corrective actions.
Who should complete the log?
A security officer, substation supervisor, operations lead, or other designated inspector should complete it, depending on your site procedure. The person filling it out should be able to verify approved access lists, escort requirements, and perimeter conditions. If the inspection is part of a formal compliance program, assign it to someone who can escalate deficiencies and track closure. The signer should be the person accountable for the review.
How often should this be used?
Use it whenever access needs to be documented for a compliance review, scheduled inspection, or after a security event. Many organizations also use it during routine patrols, contractor visits, or spot checks of substation access controls. The right cadence depends on your internal procedures and risk profile. If your process already requires daily, weekly, or event-based logging, this template can match that cadence.
Does this template map to NERC CIP requirements?
Yes, it is built to support evidence collection for physical access control expectations under the NERC CIP framework, especially for substations with BES Cyber Systems. It focuses on traceable access records, authorization verification, escort controls, and perimeter protection. It does not replace your compliance program or legal review. Use it as an operational record that supports your required evidence package.
What are the most common mistakes when using it?
Common mistakes include leaving out the purpose of entry, failing to record who authorized access, and not noting whether a visitor was escorted. Another frequent issue is using a log that cannot be traced back to an approved access list or work order. Teams also miss perimeter defects such as damaged locks, malfunctioning badge readers, or signs of tailgating risk. This template is designed to make those gaps visible.
Can we customize it for our site procedures?
Yes, and you should. Add your substation naming convention, access approval workflow, badge formats, escort rules, and any site-specific perimeter controls. You can also add fields for work order numbers, camera verification, key custody, or incident reference numbers. Keep the core fields intact so the log still supports audit traceability.
How does this compare with a simple visitor sign-in sheet?
A visitor sign-in sheet usually captures only names and times, which is not enough for a substation compliance record. This template adds authorization status, escort verification, perimeter control checks, and corrective action tracking. That makes it more useful for audits, investigations, and internal reviews. It also reduces the chance that a missing detail becomes a compliance deficiency.
Can this be integrated with access control systems or CMMS tools?
Yes. Many teams use it alongside badge access reports, key control logs, work order systems, or a CMMS for corrective actions. You can attach exported access records, photos of perimeter conditions, and incident notes to the evidence package. If your organization uses digital approvals, link the log entry to the approval record or work order reference. The goal is to keep the audit trail connected from entry to authorization.
Related templates
Go deeper on the topic
-
Predictive scheduling laws — also called fair workweek laws or secure scheduling — require employers in covered industries to publish employee schedules...
-
Overtime calculation is the process of applying federal, state, local, and contractual rules to hours worked to determine the correct pay — including...
-
A near-miss is an event that could have caused injury or damage but didn't — a slip that didn't fall, a load that shifted but didn't drop, a machine that...
-
Lockout/tagout (LOTO) is the procedure for controlling hazardous energy — electrical, hydraulic, pneumatic, mechanical, thermal, chemical — before...
-
When scheduling tools lack leave and budget data, costly errors follow. See how integrated workforce management closes the context gap.
-
Compare the top frontline communication platforms of 2026—MangoApps, Blink, Connecteam, Staffbase, and more—to find the right fit for your deskless workforce.
-
HR follow-up emails waste time; discover how employee experience platforms replace manual coordination across reviews, goals, hiring, and onboarding.
-
Learn how organizations with hourly workers, union contracts, and shift differentials can apply compensation rules consistently and accurately at scale.
Ready to use this template?
Get started with MangoApps and use NERC CIP Physical Access Control Log - Substation with your team — pricing built for small business.
