UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities
SyDP 7.5 Preparation for and response to cyber security incidents – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities 7.5-PLAN: Incident response policy and plans

What does 7.5-PLAN require?

A clear incident response policy and plan, prioritising incidents by impact on nuclear safety and security and the wider business, set team membership, rotation, roles and the command and control structure, and are informed by threat assessments (for example from NCSC and ONR's threat TAG). The policy defines when to use internal teams and when to engage an external retainer, and senior leadership and legal decisions such as a ransomware policy are made in advance with HMG and NCSC advice considered. Independent testing (penetration testing, purple teaming or attack simulation) is defined in the approved security plan, with the highest category systems assured at least annually or a justified alternative. Plans cover supply chain risk, are integrated with business plans, communicated, kept offline, and reviewed periodically or when threats change.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in SyDP 7.5 Preparation for and response to cyber security incidents – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities controls