UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities
SyDP 7.1 Effective cyber and information risk management – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities 7.1-TI: Risk treatment: implementation

A documented process confirms that selected treatments are implemented as planned and on time, reviewed by the risk owner and governance fora, with independent oversight that validates the risk reduction and that residual risk sits within tolerance. Action plans are updated once treatments are validated. Where treatment is not implemented or underperforms, an exception process (such as a waiver or dispensation) records the exception, measures the risk it introduces, sets the remediation and a time limit, and requires approval proportionate to the risk.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in SyDP 7.1 Effective cyber and information risk management – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities controls