UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities
SyDP 7.2 Information security – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities 7.2-CLASS: Data classification and SNI accounting

Staff are trained and accountable for the information and assets they control, and mechanisms ensure assets are classified under the relevant classification policy, notably the NISR Classification Policy built on the Government Security Classifications (SyAPs paragraph 186). Assets are given a value and an owner; an Information Asset Register records what SNI and associated assets are held, in what format, value and location, including those held by third parties, and is reviewed regularly; electronic labelling is considered. Holdings above OFFICIAL-SENSITIVE (and legacy CONFIDENTIAL documents) are accounted for in a dedicated register recording location, responsible and supervising officers, musters (a full muster at each handover), formal issues with signed receipts, and witnessed destruction with date and method, and weeding reduces holdings.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in SyDP 7.2 Information security – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities controls