Telecommunications Sector Security Reforms (TSSR) TSRMP-11(2): TSRMP Rules s 11(2): cyber and information security hazard process

The program must include a process or system that, so far as reasonably practicable, minimises or eliminates any material risk of a cyber and information security hazard occurring and mitigates its relevant impact on the asset. The hazard covers anyone, authorised or not, improperly accessing or misusing information or computer systems about or related to the asset, or using a computer system to obtain unauthorised control of or access to the asset where that may impair its proper functioning.