Within how many days must a recovery plan be updated if there is a change affecting its execution per Requirement R3.2?

The requirement states that if there are any changes that affect the execution of a recovery plan, the organization must update the plan within a specific timeframe. According to NERC CIP v7, specifically Requirement R3.2, the correct time frame for updating the recovery plan is 60 calendar days.

This requirement ensures that organizations remain prepared and capable of addressing any contingencies that may arise due to changes in their environment, ensuring the ongoing resilience and reliability of the bulk power system. By mandating an update within 60 days, NERC emphasizes prompt attention to changes, facilitating continuous improvement and alignment with new operational realities, thus reinforcing the overall security posture of the critical infrastructure.

Other timeframes, such as 30, 45, or 90 calendar days, do not meet the requirements outlined in R3.2, thus reinforcing the necessity of adhering to the stipulated 60-day period for updates.