Regulation 9 Preparing for remediation and recoveryI1

an online copy of information necessary to maintain the normal operation of the public electronic communications network or public electronic communications service, and

so far as is proportionate, an offline copy of that information,

for promptly identifying the occurrence of any security compromise and assessing its severity, impact and likely cause,

for promptly identifying any mitigating actions required as a result of the occurrence of any security compromise,

where the occurrence of a security compromise gives rise to the risk of a connected security compromise, for preventing the transmission of signals that give rise to that risk,

for dealing with the occurrence of a security compromise within a reasonable period appropriate to the assessed security risk of the network provider or service provider, and without creating any risk of a further security compromise occurring,

for ensuring that, if the network provider or service provider is unable to take steps for the purposes of preventing any adverse effects (on the network or service or otherwise) arising from the occurrence of a security compromise within the period of 14 days beginning with the day on which it occurs, the network provider or service provider is able to prepare a written plan as to how and when the provider will take such measures,

for dealing with any unauthorised access to, or control over, security critical functions by taking action as soon as reasonably possible, and without creating any risk of a further security compromise occurring, to ensure that only authorised users have access to the network or service, and

for replacing information damaged by security compromises with the information contained in the copy referred to in sub-paragraph (a).