Division 16 To mitigate risk to CIS, a range of technical and non-technical security measures, organised as multiple layers of defence, shall be implemented. These layers shall include:
United Kingdom
(a) Deterrence (b) Prevention (c) Detection (d) Resilience (e) Recovery
security measures aimed at dissuading any adversary planning to attack the CIS;
security measures aimed at impeding or blocking an attack on the CIS;
security measures aimed at discovering the occurrence of an attack on the CIS;
security measures aimed at limiting impact of an attack to a minimum set of information or CIS assets and preventing further damage; and
security measures aimed at regaining a secure situation for the CIS.
The degree of stringency of such security measures shall be determined following a risk assessment.