UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities
SyDP 7.1 Effective cyber and information risk management – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities 7.1-AR: Continuous assessment and review

The framework includes continuous assessment and validation that cyber mitigations remain effective, through regular risk and vulnerability assessment and the capability to scan and test the environment (for example compliance scans against baselines for IT and OT). Compliance monitoring runs across all lines of defence to a prioritised assessment schedule with SQEP resource. Findings are rated, approved and actioned, closure is reported to governance, and the risk register is updated with reassessment where needed. CS&IA risk management is an ongoing, embedded activity, not a periodic standalone task.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in SyDP 7.1 Effective cyber and information risk management – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities controls