UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities
SyDP 7.2 Information security – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities 7.2-EOC: End of contract

What happens to information and assets at the end of a contract (or of the holding period, whichever is longer) is agreed at the outset and written into the contract. Without a follow-on contract, assets are returned or securely destroyed using the register of what each contractor holds, with destruction certificates and transfer records reflected in asset and risk registers and methods in line with national technical authority guidance (TAG 7.4). Where SNI is retained for legal, contractual or financial reasons, the dutyholder continues risk-managed assurance, and retaining third parties remain subject to ONR intervention.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in SyDP 7.2 Information security – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.