UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities
SyDP 7.2 Information security – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities 7.2-IAS: Information assurance strategy and programme

A board-driven programme of information assurance is a key priority (SyAPs paragraph 185). The TAG expects a coherent CS&IA strategy with the same scope as the TAG 7.1 risk assessment, including suppliers, service providers, customers and partners that hold assets the dutyholder is responsible for, with third-party requirements made enforceable in contracts. The strategy is formally endorsed by the Board, overseen by the Board member who carries responsibility for cyber and information risk, and delivered through a resourced CS&IA programme with clear aims, accountability, line of sight to the strategy and a communications plan.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in SyDP 7.2 Information security – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.