UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities
SyDP 7.1 Effective cyber and information risk management – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities 7.1-RA: Risk assessment and analysis

A documented, repeatable process assesses CS&IA risk, embedded in change management and the system development lifecycle (including secure end-of-life destruction). It is threat-intelligence led, using SQEP threat and vulnerability analysis with input from government and industry bodies aware of nuclear operations; it evaluates impact and likelihood, coordinates with safety functions (for example BS 62859:2020), and records both inherent and residual risk. Responsibilities, scope and thresholds for assessment are defined, sources are validated, and results go into a register of titled, rated risks linked to assets. Themes, aggregation and tiers (organisation, process, system) are analysed, and risk appetite is linked to cyber security at senior level. Inspectors check reassessment on change and upward reporting of threat changes.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in SyDP 7.1 Effective cyber and information risk management – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities controls