Back to Frameworks

UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

United Kingdom (Great Britain civil nuclear sector)
vONR Security Assessment Principles 2022 Edition Version 1 (FSyP 7) with TAGs 7.1 Issue 2.1 (2024), 7.2 Issue 2.1 (2023), 7.4 Issue 2 (2022), 7.5 Issue 4 (2024)
5 domains
49 controls

ONR's Fundamental Security Principle 7 on cyber security and information assurance from the Security Assessment Principles (2022 Edition), with its five Security Delivery Principles (risk management, information security, protection of nuclear technology, physical protection of information, incident preparation and response) and the published technical assessment guides inspectors use to judge civil nuclear dutyholders' security plans under the Nuclear Industries Security Regulations 2003. 49 leaves read against the SyAPs and TAGs; the SNI-bearing categorisation and outcome annexes are not public.

Verified

UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities is a compliance framework from United Kingdom (Great Britain civil nuclear sector) with 5 domains and 49 controls. The largest domains are SyDP 7.5 Preparation for and response to cyber security incidents – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities (18 controls), SyDP 7.4 Physical protection of information – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities (11 controls), SyDP 7.1 Effective cyber and information risk management – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities (10 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (5)

SyDP 7.1 Effective cyber and information risk management – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

10 controls
Controls in the SyDP 7.1 Effective cyber and information risk management – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities domain of UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities: 10 controls
CodeTitle
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.1-ACCAuthorise, communicate and consult
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.1-ARContinuous assessment and review
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.1-ASSETAsset identification and categorisation
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.1-CCCS&IA risk management for classified contracts
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.1-CPSCategorisation and a graded cyber protection system
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.1-MONMonitoring the risk framework
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.1-PREPPrepare the organisation for CS&IA risk management
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.1-RARisk assessment and analysis
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.1-TIRisk treatment: implementation
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.1-TSRisk treatment: selection

SyDP 7.2 Information security – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

8 controls
Controls in the SyDP 7.2 Information security – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities domain of UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities: 8 controls
CodeTitle
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.2-CLASSData classification and SNI accounting
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.2-DIGDigital information, portable media and enrichment technology
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.2-EOCEnd of contract
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.2-IASInformation assurance strategy and programme
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.2-ICCIdentification of classified contracts
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.2-POLCS&IA policy and standards
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.2-TPACS&IA assessment of third-party suppliers
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.2-TPASSOngoing assurance of third-party suppliers

SyDP 7.3 Protection of nuclear technology and operations – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

2 controls
Controls in the SyDP 7.3 Protection of nuclear technology and operations – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities domain of UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities: 2 controls
CodeTitle
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.3-CHARCharacterise nuclear technology
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.3-LIFERisk-informed CPS across the technology lifecycle

SyDP 7.4 Physical protection of information – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

11 controls
Controls in the SyDP 7.4 Physical protection of information – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities domain of UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities: 11 controls
CodeTitle
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.4-ASSURAssurance of physical security measures
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.4-CONContractor physical security for SNI
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.4-DISPSecure disposal of assets
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.4-EMSTEMPEST and electromagnetic security
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.4-ENVEnvironmental controls and power
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.4-PLANPhysical security plan and layered controls
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.4-RAPhysical security risk assessment for information
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.4-REMRemote working and mobile devices
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.4-RMControl of removable media
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.4-SITEEquipment siting and cable security
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.4-SMSSecurity management systems protection and resilience

SyDP 7.5 Preparation for and response to cyber security incidents – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities

18 controls
Controls in the SyDP 7.5 Preparation for and response to cyber security incidents – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities domain of UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities: 18 controls
CodeTitle
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.5-ALERTGenerating alerts and identifying incidents
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.5-BCDRBusiness continuity, disaster recovery and cyber contingency plans
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.5-COMMIncident communications
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.5-CONTAINContainment strategy and short-term containment
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.5-ENVEnvironment preparation
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.5-EVIDEvidence handling and system forensics
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.5-HRManagement structures, HR and security communication
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.5-HUNTProactive abnormality and attack discovery
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.5-LESSONSLessons learnt
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.5-LOGSSecuring logs
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.5-MONSecurity monitoring
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.5-NOTIFYIncident reporting and notification
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.5-PLANIncident response policy and plans
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.5-RECOVEREradication and recovery
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.5-RRCResponse and recovery capability and backups
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.5-STAFFMonitoring staff, tools and skills
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.5-TOOLDigital forensic tooling and readiness
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.5-TRAINTraining and exercising

What is UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities and who does it apply to?

UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities is a compliance framework from United Kingdom (Great Britain civil nuclear sector) with 5 domains and 49 controls. ONR's Fundamental Security Principle 7 on cyber security and information assurance from the Security Assessment Principles (2022 Edition), with its five Security Delivery Principles (risk management, information security, protection of nuclear technology, physical protection of information, incident preparation and response) and the published technical assessment guides inspectors use to judge civil nuclear dutyholders' security plans under the Nuclear Industries Security Regulations 2003. 49 leaves read against the SyAPs and TAGs; the SNI-bearing categorisation and outcome annexes are not public. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

What does UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities actually require?

UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities has 49 controls organised across 5 domains. The largest domains are SyDP 7.5 Preparation for and response to cyber security incidents – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities (18 controls), SyDP 7.4 Physical protection of information – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities (11 controls), SyDP 7.1 Effective cyber and information risk management – UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities (10 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

If I already comply with another framework, how much of UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities do I already cover?

UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.

How do I implement UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities?

Start your UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 49 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,121 frameworks.

Get Started Free →

Free forever, no credit card required