Provision of Technical Support Delivery of the Framework for Smaller Dutyholders Security Plans

The Security Assessment Principles (SyAPs) were published in March 2017. At their heart is an absolute focus on outcomes and a complete withdrawal of model standards. This requires that industry develops full ownership and understanding of risk, how to control it, and assurance that the controls are functioning effectively. This needs to be fully articulated in revised security plans that provide justification that outcomes will be achieved. Given that there are a number of smaller dutyholders who do not have the capacity or capability to produce and implement comprehensive plans aligned to SyAPs as described above, there is a need for a framework document that will facilitate SyAPs align…

Read all of it on Contracts Finder →