CIP-009-6 Table R1 Recovery Plan Specifications – Part Applicable Systems Requirements Measures High Impact BES Systems and One or more processes for the An example of evidence may include, but is 1.3 their associated: backup and storage of information not limited to, documentation of specific EACMS; and required to recover BES Cyber processes for the backup and storage of PACS System functionality. information required to recover BES Cyber System functionality. Medium Impact BES Cyber Systems and their associated: EACMS; and PACS Registered Entity Response (Required): Compliance Narrative: Provide a explanation, in your own words, of how you comply with this Requirement. References to supplied evidence, including links to the appropriate page, are recommended. Registered Entity Evidence (Required): The following information is requested for each document submitted as evidence. Also, evidence submitted should be highlighted and bookmarked, as appropriate, to identify the exact location where evidence of compliance may be found. Relevant Revision Page(s) Description of or Document or Applicability of File Name Document Title Version Date Section(s) Document Audit Team Evidence Reviewed (This section to be completed by the Compliance Enforcement Authority): Compliance Assessment Approach Specific to CIP-009-6, R1 Part 1.3 This section to be completed by the Compliance Enforcement Authority Verify the Responsible Entity has documented one or more recovery plans which include one or more processes for the backup and storage of information required to recover BES Cyber System functionality. Auditor Notes:
CIP-009-6 Table R1 – Recovery Plan Specifications Part Applicable Systems Requirements Measures 1.3 High Impact BES Systems and their associated: EACMS; and PACS Medium Impact BES Cyber Systems and their associated: EACMS; and PACS One or more processes for the backup and storage of information required to recover BES Cyber System functionality. An example of evidence may include, but is not limited to, documentation of specific processes for the backup and storage of information required to recover BES Cyber System functionality. Registered Entity Response (Required): Compliance Narrative: Provide a explanation, in your own words, of how you comply with this Requirement. References to supplied evidence, including links to the appropriate page, are recommended. Registered Entity Evidence (Required): The following information is requested for each document submitted as evidence. Also, evidence submitted should be highlighted and bookmarked, as appropriate, to identify the exact location where evidence of compliance may be found. File Name Document Title Revision or Version Document Date Relevant Page(s) or Section(s) Description of Applicability of Document Audit Team Evidence Reviewed (This section to be completed by the Compliance Enforcement Authority): Compliance Assessment Approach Specific to CIP-009-6, R1 Part 1.3 This section to be completed by the Compliance Enforcement Authority Verify the Responsible Entity has documented one or more recovery plans which include one or more processes for the backup and storage of information required to recover BES Cyber System functionality. Auditor Notes:
RSAW%20CIP-009-6_2015_v1.docx