R3 - Physical Security Plan

The R3 requirement of NERC CIP-014 obliges a bulk-electric system entity to create and maintain a documented Physical Security Plan that delineates the security zones, controls, responsibilities and procedures needed to protect its critical cyber assets from physical threats, and to coordinate the plan with related CIP standards and incident-response processes.