Common use of Physical Access of Cyber Components Clause in Contracts

Physical Access of Cyber Components. Supplier shall provide a detailed plan for appropriate physical security mechanisms. Supplier shall provide lockable or locking enclosures for control system components (e.g., servers, clients, and networking hardware). Supplier shall provide locking devices with a minimum of two keys per lock identifiable to each lock, and keyed or not keyed alike depending on Owner requirements. Supplier shall recommend a room locking device(s) where the equipment and workstations are located, if not already installed by Owner. Supplier shall verify and provide documentation that unauthorized logging devices are not installed (e.g., key loggers, cameras, and microphones). Supplier shall provide two-factor authentication for physical access control.‌‌