UK Telecommunications (Security) Act 2021 r9b: reg.9(2)(c) Have means to assess, contain and deal with compromises, including a written plan when effects cannot be prevented within 14 days

What does r9b require?

Providers must have means and procedures to promptly identify a compromise and assess its severity, impact and cause; identify mitigating action; stop signals that risk a connected compromise elsewhere; deal with the compromise within a reasonable period for the assessed risk without creating further risk; prepare a written plan of how and when measures will be taken if adverse effects cannot be prevented within 14 days; regain exclusive authorised control over security critical functions promptly; and restore damaged information from the retained copy.