OAR 333-125-0105: Physical Protection Requirements During Use: General Security Program Requirements

(1) Security plan. Each licensee identified in OAR 333-125-0100(1) shall develop a written security plan specific to its facilities and operations. The purpose of the security plan is to establish the licensee’s overall security strategy to ensure the integrated and effective functioning of the security program required by this division. The security plan must, at a minimum: (a) Describe the measures and strategies used to implement the requirements of OAR 333-125-0100 through 333-125-0155; and (b) Identify the security resources, equipment, and technology used to satisfy the requirements of this division. (2) The security plan must be reviewed and approved by the individual with overall responsibility for the security program. (3) A licensee shall revise its security plan as necessary to ensure the effective implementation of the Authority' requirements. The licensee shall ensure that: (a) The revision has been reviewed and approved by the individual with overall responsibility for the security program; and (b) The affected individuals are instructed on the revised plan before the changes are implemented. (4) The licensee shall retain a copy of the current security plan as a record for three years after the security plan is no longer required. If any portion of the plan is superseded, the licensee shall retain the superseded material for three years after the record is superseded.