The asset owner shall have policies and procedures related to bringing the IACS to a predetermined state if normal operation cannot be maintained as a result of a detected security compromise.