NERC CIP-003 includes a small physical security portion for low impact BES Cyber Systems, mandating the implementation of specified physical access controls to the defined Electronic Security Perimeter.

NERC CIP-003's physical portion includes measures to secure critical cyber assets by implementing physical access controls, monitoring and logging access, and protecting sensitive equipment and locations from unauthorized physical entry or tampering within the North American electricity industry.