How should you handle time-bound reporting during a blackout when time sources are unavailable?

• A. Prohibit reporting until time sources recover.
• B. Use alternate time sources, preserve logs, and document outages and restoration; revert to standard once available.
• C. Rely on local time sources without synchronization.
• D. Create provisional timestamps based on memory.

Answer: (B)

When time sources are unavailable, the priority is to preserve the integrity of time references used for reporting and event correlation. The best practice is to switch to available alternate time sources, keep meticulous logs of what happened, and document both the outage and when the time sources are restored. Once standard time references are back, you revert to them so schedules, logs, and event records align again with the established reference framework. This approach maintains traceability and auditability, which are essential for post-event analysis and regulatory compliance.

Prohibiting reporting until time sources recover would leave operators blind to ongoing conditions and hinder situational awareness. Relying on local time without synchronization risks inconsistent timestamps across devices and teams, making correlation of events unreliable. Creating provisional timestamps from memory lacks verifiable accuracy and can be disputed, undermining the integrity of the records.