NERC CIP-003's physical portion includes measures to secure critical cyber assets by implementing physical access controls, monitoring and logging access, and protecting sensitive equipment and locations from unauthorized physical entry or tampering within the North American electricity industry.

CIP-003? Didn’t we already cover this? And now this is due in less than a year?

NERC CIP-003 includes security management controls to protect critical cyber assets by identifying, categorizing, and implementing security measures to ensure the reliability and resilience of the North American electricity industry.

What are the low impact requirements for CIP-002? Evidence! What evidence?

What does it mean? Low impact CIP standards are effective now with more becoming mandatory in the future. Identifying Bulk Electric System assets and categorizing their impact level is no easy task.