Compliance Assessment R1 Requirement & Measure Evidence Submission Evidence Description Evidence Assessment Approach Auditor Notes R1. Each Responsible Entity shall have one or more documented recovery plans that collectively include each of the applicable requirement parts in CIP‐009-AB‐5 Table R1 – Recovery Plan Specifications. M1. Evidence must include the documented recovery plan(s) that collectively include the applicable requirement parts in CIP‐009-AB‐5 Table R1 Recovery Plan Specifications. – Part 1.1 in Table R1 Recovery Plan Specifications AR1 Part 1.1 Please Verify the Responsible Entity has documented – provide: one or more recovery which include Applicable Systems conditions for activation of the recovery plan(s). High Impact BES cyber systems and their associated: One or more 1. electronic access control or monitoring systems; and documented recovery 2. physical access control systems plans pertaining to requirement R1 Part Medium Impact and their associated: 1.1. BES cyber systems 1. electronic access control or monitoring systems; and 2. physical access control systems Requirements Conditions for activation of the recovery plan(s). Measures An example of evidence may include, but is not limited to, one or more plans that include language identifying conditions for activation of the recovery plan(s).
Compliance Assessment R1 Requirement & Measure Evidence Submission Evidence Description Evidence Assessment Approach Auditor Notes R1. Each Responsible Entity shall have one or more documented recovery plans that collectively include each of the applicable requirement parts in CIP‐009-AB‐5 Table R1 – Recovery Plan Specifications. M1. Evidence must include the documented recovery plan(s) that collectively include the applicable requirement parts in CIP‐009-AB‐5 Table R1 – Recovery Plan Specifications. Part 1.1 in Table R1 – Recovery Plan Specifications Applicable Systems High Impact BES cyber systems and their associated: 1. electronic access control or monitoring systems; and 2. physical access control systems Medium Impact BES cyber systems and their associated: 1. electronic access control or monitoring systems; and 2. physical access control systems Requirements Conditions for activation of the recovery plan(s). Measures An example of evidence may include, but is not limited to, one or more plans that include language identifying conditions for activation of the recovery plan(s). AR1 Part 1.1 Please provide: One or more documented recovery plans pertaining to requirement R1 Part 1.1. Verify the Responsible Entity has documented one or more recovery which include conditions for activation of the recovery plan(s).
CIP-009-AB-5-RSAW.docx