UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities
SyDP 7.1 Effective cyber and information risk management – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities 7.1-CC: CS&IA risk management for classified contracts

Where classified contracts exist, contract terms allow pre-contract and in-contract assurance of the supplier's CS&IA arrangements and redress of deficiencies. Third parties' decisions on residual risk are reported back into the dutyholder's own framework, and the dutyholder satisfies itself that delivery partners and service providers apply adequate controls. Contractors are told of their legal obligations for handling SNI, including the NISR Classification Policy and relevant SyAPs expectations, and subcontractor access risk is included in risk management and residual risk reporting.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in SyDP 7.1 Effective cyber and information risk management – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities controls