UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities
SyDP 7.1 Effective cyber and information risk management – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities 7.1-ACC: Authorise, communicate and consult

A documented governance process, aligned to wider risk governance, shows how the Board, as ultimately accountable, oversees CS&IA risk and delegates to sub-committees and individuals with approved terms of reference. The Board approves and reviews CS&IA policies and risk tolerance; baseline configurations and controls are agreed through an auditable process; change activity is approved only once CS&IA risk is managed or scheduled. Strategy and risk are communicated to all staff, with targeted communications for audiences such as asset owners, procurement and administrators, and to external stakeholders including ONR. Staff and contractors receive onboarding and annual awareness training and know how to report risks. A Board-approved management information model defines reports, KPIs and KRIs, and culture and risk bias are considered so risk is openly reported.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in SyDP 7.1 Effective cyber and information risk management – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities controls