The Responsible Entity's recovery plan(s) have been updated to reflect any changes or lessons learned as a result of an exercise or the recovery from an actual incident but the updates were not communicated to personnel responsible for the activation and implementation of the recovery plan(s) within thirty calendar days of the change. Backup and Restore The — CIP-009-3 R4 N/A N/A N/A The Responsible recovery plan(s) shall include Entity's recovery processes and procedures for the plan(s) do not include backup and storage of processes and information required to procedures for the successfully restore Critical backup and storage of Cyber Assets. For example, information required to backups may include spare successfully restore electronic components or Critical Cyber Assets. equipment, written documentation of configuration settings, tape backup, etc. Testing Backup Media — CIP-009-3 R5 N/A N/A N/A The Responsible Information essential to recovery Entity's information that is stored on backup media essential to recovery shall be tested at least annually to that is stored on backup ensure that the information is media has not been available. Testing can be tested at least annually completed off site. to ensure that the information is available.
The Responsible Entity's recovery plan(s) have been updated to reflect any changes or lessons learned as a result of an exercise or the recovery from an actual incident but the updates were not communicated to personnel responsible for the activation and implementation of the recovery plan(s) within thirty calendar days of the change. CIP-009-3 R4 Backup and Restore — The recovery plan(s) shall include processes and procedures for the backup and storage of information required to successfully restore Critical Cyber Assets. For example, backups may include spare electronic components or equipment, written documentation of configuration settings, tape backup, etc. N/A N/A N/A The Responsible Entity's recovery plan(s) do not include processes and procedures for the backup and storage of information required to successfully restore Critical Cyber Assets. CIP-009-3 R5 Testing Backup Media — Information essential to recovery that is stored on backup media shall be tested at least annually to ensure that the information is available. Testing can be completed off site. N/A N/A N/A The Responsible Entity's information essential to recovery that is stored on backup media has not been tested at least annually to ensure that the information is available.