Page 153 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
Under 10 CFR 73, if the licensee subsequently retracts a telephonic notification made under this section as not meeting the threshold of a reportable event after it has submitted a written security follow-up report required by this paragraph, then the licensee must submit a revised written security follow-up report in accordance with this paragraph.
Read the playbook
Under 36 CFR 1223, a vital records program has two objectives: it provides an agency with the information it needs to conduct its business under other than normal operating conditions and to resume normal business afterward.
Read the briefing
Under 36 CFR 1223, the rule requires that in carrying out a vital records program, agencies ensure that vital records are adequately protected, accessible, and immediately usable.
Read the checklist
Under 36 CFR 1223, records may be maintained on a variety of media including paper, magnetic tape, optical disk, photographic film, and microform. Under 36 CFR 1223, vital records can be original records or copies of records.
Read the explainer
Under 36 CFR 1234, the rule requires that piping (with the exception of fire protection sprinkler piping and storm water roof drainage piping) not be run through records storage areas unless supplemental measures such as gutters or shields are used to prevent water leaks and the piping assembly is inspected for potential leaks regularly.
Read the guide
Under 36 CFR 1234, the rule requires that the fire detection and protection systems be designed or reviewed by a licensed fire protection engineer.
Read the playbook
Under 36 CFR 1234, the rule requires that paper-based permanent, unscheduled, and sample/select records be stored in records storage space that provides 24 hour/365 days per year air conditioning (temperature, humidity, and air exchange) equivalent to that required for office space.
Read the briefing
Under 36 CFR 1234, the rule requires that the documentation demonstrate how that system meets the requirement in section 1234.12(s) through: a report under seal of a licensed fire protection engineer that details the characteristics of the system.
Read the checklist
Under 36 CFR 1236, agencies must establish integrity controls, such as audit trails, so records in electronic information systems remain complete and unaltered.
Read the explainer
Under 36 CFR 1236, the rule requires that agencies maintain up-to-date documentation about electronic information systems that is adequate to specify all technical characteristics necessary for reading and processing the records contained in the system.
Read the guide