UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities
SyDP 7.5 Preparation for and response to cyber security incidents – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities 7.5-EVID: Evidence handling and system forensics

Evidence is preserved in case it is needed for legal proceedings, using write blockers, master and working images, procedures agreed with legal staff and law enforcement, and chain of custody forms recording identifiers, handlers, times with time zone and storage locations. Staff are competent in the four principles of the ACPO good practice guide for digital evidence, and systems are forensically imaged before rebuild, by in-house or third-party capability.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in SyDP 7.5 Preparation for and response to cyber security incidents – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities controls