PROVISION OF TECHNICAL SUPPORT DELIVERY OF THE FRAMEWORK FOR SMALLER DUTYHOLDERS SECURITY PLANS

The Security Assessment Principles (SyAPs) were published in March 2017. At their heart is an absolute focus on outcomes and a complete withdrawal of model standards. This requires that industry develops full ownership and understanding of risk, how to control it, and assurance that the controls are functioning effectively. This needs to be fully articulated in revised security plans that provide justification that outcomes will be achieved. Given that there are a number of smaller dutyholders who do not have the c...