Critical Infrastructure and Utility Security

The NERC CIP physical security standard, CIP-014, is narrower than it is usually described. It applies to specifically identified critical transmission stations and substations, and to the primary control centers that operationally control them, rather than to every asset a utility owns. The identification process itself is part of the standard.

For assets in scope, the standard drives an evaluation of threats and vulnerabilities specific to that station, and a documented physical security plan that addresses those findings, including resiliency or security measures, law enforcement coordination and timelines for implementation. Both the risk assessment and the physical security plan require review by an unaffiliated third party.

What that means for us practically: the camera and detection design has to trace back to a specific documented threat, and the as-built package has to make that traceability obvious. We produce coverage maps, detection zone diagrams and verification records built for that review rather than as an afterthought.

Confirm current requirements against the standard as enforced, because the CIP family is revised regularly.

America's Water Infrastructure Act obligations center on a risk and resilience assessment and an emergency response plan, both certified and periodically revised. The assessment covers malevolent acts and natural hazards against physical barriers, the physical infrastructure, monitoring practices and the operational technology environment.

AWIA does not hand you a camera specification. It requires that you assessed the risk and that your emergency response plan describes the strategies and resources you use to improve resilience, including physical security. Camera and access systems are how many of those strategies get implemented and evidenced.

Typical scope on a water site: plant entry and gate control with plate recognition, perimeter detection along fence lines, chemical storage and feed rooms, finished water and clearwell access, control room access, and remote pump, lift and tank sites.

These sites share a pattern: a hard perimeter, a small number of high-consequence openings, and a strong need for audited access rather than broad camera coverage.

Design emphasis goes to layered perimeter detection, mantrap or vestibule entry with anti-passback, cage and cabinet level access where colocation applies, and continuous coverage of every door into the white space. Pipeline and energy sites add valve stations, meter sites and tank batteries, which are usually remote and unmanned.

The hard problem in this vertical is the site with no power and no network. Solar plus cellular is usually the only practical answer, and it imposes a strict power budget that shapes every other decision.

That budget favors low-power imaging with on-camera analytics so the radio only wakes for real events, event-based rather than continuous recording, local storage with scheduled or on-demand offload, and hardware rated for the temperature range the site actually sees rather than the one on a datasheet.

Detection is analytics-based by necessity. Passive motion in an unlit desert or mountain site produces alarms all night. Line crossing, loitering and object-left-behind rules with a verified human review step keep the alarm volume low enough that responders keep responding.

Talk-down speakers work well at these sites. A remote voice describing what somebody is wearing ends most fence-line trespass events without a dispatch.

Controlled spaces in this vertical often carry a two-person rule and a requirement that every entry is attributable. Access control has to log the credential, the door state and the escort, and the camera has to prove the number of people who entered.

The audit package matters as much as the install. We deliver device inventories with firmware levels, network segmentation diagrams, coverage and detection zone maps, commissioning verification records, credential authorization lists and a maintenance log format your compliance team can keep using after we leave.