UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities
SyDP 7.1 Effective cyber and information risk management – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities 7.1-CPS: Categorisation and a graded cyber protection system

SyAPs paragraphs 180 to 184: dutyholders need a mature, threat-informed understanding of CS&IA risk across the organisation and the lifecycle of their activities, drawing on the National Technical Authority and HMG threat intelligence, as the basis for proportionate policies, standards and procedures. Working with industry and government stakeholders and trained specialists, they categorise both SNI (with the IT that stores, processes or transmits it) and technology used with nuclear or other radioactive material, using the categorisation tables in Annexes F and G. The categorisation drives a cyber protection system (CPS) covering identify, protect, detect, respond and recover that meets outcomes graded by consequence of compromise (Annexes H and I), with indicative postures (Annexes H and J) as guidance rather than prescription; innovative solutions are allowed where the outcome is shown with confidence. The CPS is kept effective by design validation, including regular cyber risk and vulnerability assessment. The annexes are redacted from the published SyAPs and issued on a need-to-know basis.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in SyDP 7.1 Effective cyber and information risk management – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities controls