CIP 009 – Cyber Security — Recovery Plans for BES Cyber Systems

Purpose: Recover reliability functions performed by BES Cyber Systems by specifying recovery plan requirements in support of the continued stability, operability, and reliability of the BES.

Key Challenges:

  • Document and maintain a Recovery Plan(s)
  • Maintain updated personnel information and roles for Recovery Plan(s)
  • Develop and maintain evidence of processes or procedures that address Recovery Plans
  • Test each Recovery Plan and maintain evidence
  • Record Recovery Plan response plan changes and maintain a record
  • Retain records related to Recovery Plans

Cyberwiz-Pro Delivers:

  • Helps develop recovery plans and procedures
  • Do a gap analysis of your current processes
  • Helps manage evidence centrally
  • Generates alerts and enables workflow

Benefits:

  • Central repository of all compliance evidence
  • Streamlined audit history of periodic training and records
  • Automated management records related to creation of Recovery Plan teams
  • Reminders and workflows can be triggered to support this process