UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities
SyDP 7.1 Effective cyber and information risk management – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities 7.1-MON: Monitoring the risk framework

Regular monitoring confirms that the framework is embedded and the CS&IA posture is as expected, with adjustments where performance is weak. Documented response procedures state what happens, and who acts, when risks or KPIs and KRIs breach tolerance. The internal and external environment is monitored for changes to threats and vulnerabilities, business objectives and legal, regulatory and good-practice requirements, triggering reassessment. Where a risk crystallises, post-incident and root cause analysis tests whether the strategy and framework need to change, and learning is shared with relevant organisations, including ONR where appropriate.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in SyDP 7.1 Effective cyber and information risk management – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities controls