Project 2009-13
Interpretation of CIP-006-1 R1.1

Status:
The interpretation was approved by the NERC Board of Trustees on February 16, 2010.

Summary:

The request asks to clarify the following: If a completely enclosed border cannot be created, what does the phrase, “to control physical access" require?  Must the alternative measure be physical in nature?  If so, must the physical barrier literally prevent physical access e.g. using concrete encased fiber, or can the alternative measure effectively mitigate the risks associated with physical access through cameras, motions sensors, or encryption?   Does this requirement preclude the application of logical controls as an alternative measure in mitigating the risks of physical access to Critical Cyber Assets?

Interpretation Process:
In accordance with the Reliability Standards Development Procedure, the interpretation must be posted for a 30-day pre-ballot review, and then balloted.  There is no public comment period for an interpretation.  Balloting will be conducted following the same method used for balloting standards.  If the interpretation is approved by its ballot pool, then the interpretation will be appended to the standard and will become effective when adopted by the NERC Board of Trustees and approved by the applicable regulatory authorities.  The interpretation will remain appended to the standard until the standard is revised through the normal standards development process.  When the standard is revised, the clarifications provided by the interpretation will be incorporated into the revised standard.