20:18:18:24.02On-line monitoring and control system access and control.

A licensee must maintain a secure control environment for any on-line monitoring and controls system. System hardware must be located in an area approved by the executive secretary. Access to the area is restricted to licensed employees and to vendors who are accompanied by a licensed employee. The licensee must provide internal controls that protect the integrity of all hardware, networks, applications, databases, and data to the executive secretary for approval prior to completion of the system testing period and final approval of the system.

Source: 35 SDR 184, effective February 2, 2009.