R4 - Access Management Program

The NERC CIP-004 R4 Access Management Program requirement establishes a documented program for controlling both electronic and physical access to Critical Cyber Assets. It mandates policies, procedures, and assigned responsibilities to authorize, monitor, and review access, ensuring that only qualified personnel can reach the assets.