CIP-009 - Recovery Plans for BES Cyber Systems

CIP-009 requires owners and operators of Bulk Electric System cyber assets to create and maintain documented recovery plans that detail how to restore those assets after a cyber-security incident. The standard specifies procedures for identifying critical functions, assigning responsibilities, securing necessary resources, and testing the plans regularly to ensure timely and coordinated restoration of affected systems.