|(a) Owners of high-hazard dams that are notified in writing by the executive director within six months of the effective date of these rules of dams that may need increased security shall address: (1) security at the owner's dams to prevent unauthorized operation or access; and (2) backup power requirements to ensure operation of the dam and appurtenant structures. (b) The owner shall develop a security plan for the dam within two years of being notified by the executive director and shall submit the security plan to the executive director for review and comment. If an owner cannot complete the security plan within the two years, the owner shall request an extension of time showing cause or a reasonable basis for the need for an extension and providing a time frame to complete. The request shall be submitted to the executive director for review and approval. (c) The executive director shall file the security plan in the agency's confidential, permanent files.