Critical Infrastructure Physical Security Checklist [FREE PDF]

This critical infrastructure physical security checklist evaluates protection measures for utilities, water systems, and energy facilities against DHS CFATS Chemical Facility Anti-Terrorism Standards, NERC CIP physical security standards, and NIST SP 800-82. Security managers at CI facilities use this to verify compliance and identify vulnerabilities.

  • Industry: Security
  • Frequency: Quarterly
  • Estimated Time: 45-60 minutes
  • Role: Security Director / Facility Security Officer
  • Total Items: 8
  • Compliance: DHS CFATS (Chemical Facility Anti-Terrorism Standards, 6 CFR Part 27), NERC CIP-006-6 (physical security of cyber systems), NIST SP 800-82 (ICS security guide), AWIA 2018 (America's Water Infrastructure Act)

Perimeter & Intrusion Detection

Verify perimeter protection meets CI standards.

  • Double fence with buffer zone or equivalent deterrent at critical areas?
  • Intrusion detection system operational on perimeter?
  • Perimeter lighting covers all fence lines without dark spots?
  • Vehicle anti-ram barriers at primary entry points?

Access Control & Response

Verify access control and security response capability.

  • Background investigations for all personnel with unescorted access?
  • Security response time to intrusion alarms within required timeframe?
  • Law enforcement partnership and response plan in place?
  • Critical infrastructure security notes

Related Security Checklists

Related Security Assessment Checklists

Why Use This Critical Infrastructure Physical Security Checklist [FREE PDF]?

This critical infrastructure physical security checklist [free pdf] helps security teams maintain compliance and operational excellence. Designed for security director / facility security officer professionals, this checklist covers 8 critical inspection points across 2 sections. Recommended frequency: quarterly.

Ensures compliance with DHS CFATS (Chemical Facility Anti-Terrorism Standards, 6 CFR Part 27), NERC CIP-006-6 (physical security of cyber systems), NIST SP 800-82 (ICS security guide), AWIA 2018 (America's Water Infrastructure Act). Regulatory-aligned for audit readiness and inspection documentation.

Frequently Asked Questions

What should a Critical Infrastructure Physical Security Checklist [FREE PDF] include?

A Critical Infrastructure Physical Security Checklist [FREE PDF] should cover all inspection points required by DHS CFATS (Chemical Facility Anti-Terrorism Standards, 6 CFR Part 27) & NERC CIP-006-6 (physical security of cyber systems). Key sections include: verification of compliance with DHS CFATS (Chemical Facility Anti-Terrorism Standards, 6 CFR Part 27) documentation requirements; condition assessment of all regulated equipment and processes; identification of deficiencies with corrective action assignments; inspector signature confirming observations; and a pass/fail compliance determination. The checklist must capture the inspector name, date, location, and permit or reference number. Each field should reference the specific regulatory clause it satisfies, so the completed record serves as documented evidence of due diligence for safety and regulatory compliance compliance purposes.

How often should a Critical Infrastructure Physical Security Checklist [FREE PDF] be completed?

Critical Infrastructure Physical Security Checklist [FREE PDF] inspections should be completed daily; following any grid event, equipment outage, or cybersecurity incident. DHS CFATS (Chemical Facility Anti-Terrorism Standards, 6 CFR Part 27) specifies the minimum required frequency based on operational risk level and the regulated activity type. High-hazard operations typically require pre-shift verification, while lower-risk processes may allow weekly or monthly inspection cycles. The schedule must be documented in the organization's safety or quality management plan. Records must be retained for 3 years minimum and made available to Security Director / Facility Security Officer and regulatory inspectors on request. Increasing frequency following any incident, near-miss, or regulatory change is a best practice regardless of the minimum required schedule.

What regulations apply to critical infrastructure physical security checklist [free pdf] compliance?

Critical Infrastructure Physical Security Checklist [FREE PDF] compliance is primarily governed by DHS CFATS (Chemical Facility Anti-Terrorism Standards, 6 CFR Part 27) & NERC CIP-006-6 (physical security of cyber systems). These standards establish the minimum inspection requirements, documentation format, record retention period, and corrective action procedures for safety and regulatory compliance in Security operations. DHS CFATS (Chemical Facility Anti-Terrorism Standards, 6 CFR Part 27) provides the specific clause-level requirements that each inspection point must address. Additional state, local, or industry-specific requirements may supplement the federal baseline. Organizations operating in multiple jurisdictions must identify the most stringent applicable standard and design their inspection program to meet or exceed it, with documentation demonstrating which standard each inspection element satisfies.

Who should conduct a Critical Infrastructure Physical Security Checklist [FREE PDF]?

Critical Infrastructure Physical Security Checklist [FREE PDF] inspections must be conducted by Security Director / Facility Security Officer who have been trained on DHS CFATS (Chemical Facility Anti-Terrorism Standards, 6 CFR Part 27) requirements and the specific hazards, equipment, and processes covered by the checklist. DHS CFATS (Chemical Facility Anti-Terrorism Standards, 6 CFR Part 27) & NERC CIP-006-6 (physical security of cyber systems) defines competency requirements including training documentation, qualification records, and where applicable, certification or licensure requirements. In some jurisdictions, certain inspection types require a third-party certified inspector or a licensed professional in addition to the internal compliance check. Inspectors must be independent enough from production pressures to make objective compliance determinations and escalate deficiencies without delay.

What are the consequences of failing a Critical Infrastructure Physical Security Checklist [FREE PDF]?

Critical Infrastructure Physical Security Checklist [FREE PDF] failures trigger a documented corrective action process under DHS CFATS (Chemical Facility Anti-Terrorism Standards, 6 CFR Part 27). Minor deficiencies require a corrective action plan with assigned owner and target completion date. Major deficiencies may require operations to be suspended until the hazard is addressed. Regulatory enforcement consequences include civil penalties of $1,000,000 per violation per day per violation, with willful or repeat violations reaching grid interconnection suspension. Beyond regulatory fines, inspection failures create documented evidence of known hazards that can be used in personal injury litigation, workers' compensation claims, and insurance coverage disputes. Prompt corrective action and re-inspection documentation are the primary mitigation tools.

What is a Critical Infrastructure Physical Security Checklist [FREE PDF]?

A Critical Infrastructure Physical Security Checklist [FREE PDF] is a standardized inspection form used by security director / facility security officer to ensure consistent security operations. It contains 12 inspection points organized into 2 sections. FREE critical infrastructure physical security checklist PDF. DHS CFATS, NIST SP 800-82, and NERC CIP compliant. 40+ critical infrastructure protection points. Download FREE template.

How often should I use this security checklist?

This checklist is designed to be completed quarterly. Regular use ensures compliance with DHS CFATS (Chemical Facility Anti-Terrorism Standards, 6 CFR Part 27) and NERC CIP-006-6 (physical security of cyber systems) and helps identify issues before they become problems.

Can I download this Critical Infrastructure Physical Security Checklist [FREE PDF] as a PDF?

Yes, you can download this checklist as a FREE PDF for printing or offline use. The checklist includes 12 fields across 2 sections and typically takes 45-60 minutes to complete.

What compliance standards does this checklist cover?

This checklist helps ensure compliance with DHS CFATS (Chemical Facility Anti-Terrorism Standards, 6 CFR Part 27), NERC CIP-006-6 (physical security of cyber systems), NIST SP 800-82 (ICS security guide), AWIA 2018 (America's Water Infrastructure Act). Following these standards protects your organization and ensures best practices.

How do I complete this security inspection checklist?

Begin by completing the header fields for Facility Name, Inspection Date, Facility Security Officer Name, and Critical Infrastructure Sector. Work through each of the 2 sections, marking items Yes or No as applicable. Add notes for any issues found. The entire process takes approximately 45 to 60 minutes.

What are the key sections in this security checklist?

This security checklist is organized into 2 key sections: Perimeter & Intrusion Detection, Access Control & Response. Each section contains specific inspection points that security director / facility security officer must verify. The structured layout ensures nothing is missed during security inspections and makes the process efficient, typically taking 45-60 minutes to complete.

Who should use this Critical Infrastructure Physical Security Checklist [FREE PDF]?

This checklist is primarily designed for security director / facility security officer working in security operations. However, it is also valuable for quality assurance teams, safety officers, compliance managers, and supervisors who need to verify that security standards are being met. Organizations of all sizes can benefit from using this Critical Infrastructure Physical Security Checklist [FREE PDF] to maintain consistency and accountability.

Browse More Checklists

POPProbe