R1 - Recovery Plans

The R1 Recovery Plans requirement in NERC CIP-009 mandates that responsible entities develop, maintain and regularly test documented recovery plans to restore the operation of critical cyber assets after a disruption. Plans must identify recovery strategies, timelines, roles and resources, and be updated whenever significant changes occur to ensure timely restoration of bulk electric system reliability.