UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities 7.5-BCDR: Business continuity, disaster recovery and cyber contingency plans

Dutyholders build and exercise arrangements for business continuity, responding to cyber events and recovering from disaster, in line with relevant standards, to maintain nuclear safety and security and allow rapid recovery, consistent with the response strategies and postures in the SyAPs annexes (SyAPs paragraph 195). Cyber contingency plans set out procedures during an incident, including one forming part of a blended attack, and for adjusting security at once under the Government Response Level system. Resilience planning for critical assets, especially those important to security or safety or holding SNI, is reviewed regularly (paragraph 196).