 |
Oklahoma Administrative Code (Last Updated: March 11, 2021) |
 |
TITLE 165. Corporation Commission |
|
Chapter 55. Telecommunications Services |
|
Subchapter 25. Homeland Security and Critical Infrastructure |
SECTION 165:55-25-5. FBP Security Plan
Latest version.
- (a) Each FBP is encouraged to prepare and make available for inspection, a "Homeland Security and Critical Infrastructure Plan" ("Plan") that has been prepared with reference to the NRIC safety guidelines and standards.(b) The Plan shall be marked as "Highly Sensitive Confidential" and designate those facilities that the FBP considers to be Critical Infrastructure (physical assets and computer software as defined in OAC 165:55-25-3 above), and shall set forth the FBP's measures to secure such facilities from extended service interruption. The Plan shall also include an estimate of the costs necessary to achieve such measures.(c) The Plan shall remain on site at the FBP's business office in accordance with OAC 165:55-25-7(g) below and shall have the most current version of the redlined Plan Update Report attached to the clean version of the FBP's latest Plan. At the FBP's option, changes will either be redlined or a history of changes may be maintained.(d) The Plan shall list all locations deemed by the FBP to be critical as well as identification of any subsequently increased security measures. All locations and security measures shall be identified by code known only to the utility and designated state government officials and their designees.(e) Any subsequent security measures identified in the Plan shall contain an estimate of the cost necessary to implement such measures, a description of the measures necessary to adequately secure each specific location and an estimated schedule for completion of each measure.(f) All locations identified by the Plan that require additional security measures shall be prioritized by the FBP.(g) On July 1 of each year, the Commission Staff shall submit an Annual Report marked as "Highly Sensitive Confidential" to the Commission summarizing the results of Staff's review of each FBP's Plan (and any Plan Update Reports), along with any recommendations that Staff may have regarding such Plan(s).(h) When the Attorney General elects to submit recommendations to the Commission regarding a FBP's Plan, such recommendations shall be marked as "Highly Sensitive Confidential" and shall also be due by July 1 of each subsequent year thereafter.