CIP-009: Cyber Security Measures

  • M1. The Responsible Entity shall make available its recovery plan(s) as specified in Requirement R1.
  • M2. The Responsible Entity shall make available its records documenting required exercises as specified in Requirement R2.
  • M3. The Responsible Entity shall make available its documentation of changes to the recovery plan(s), and documentation of all communications, as specified in Requirement R3.
  • M4. The Responsible Entity shall make available its documentation regarding backup and storage of information as specified in Requirement R4.
  • M5. The Responsible Entity shall make available its documentation of testing of backup media as specified in Requirement R5.