UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities
SyDP 7.1 Effective cyber and information risk management – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities 7.1-TS: Risk treatment: selection

What does 7.1-TS require?

Identified risks go through a documented treatment decision, prioritised to reach the agreed security and safety tolerance and using a defence-in-depth approach that credits existing physical and personnel measures. The option chosen (reduce, accept, avoid, share or a combination) and its rationale are approved by risk owners and governance fora, and an action plan records existing and additional controls, expected risk reduction, timescale, owner and resources, with pace proportionate to the gap from tolerance. Accepted risks are documented with compensating controls, approved at a proportionate level and dated for review. Common control baselines for asset groups and environments such as cloud are considered, and behavioural controls feature in treatment.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in SyDP 7.1 Effective cyber and information risk management – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities controls