Division 21 Awareness of the risks and available security measures is the first line of defence for the security of CIS. In particular all personnel involved in the life-cycle of CIS, including users, shall understand:
United Kingdom
- (a)
that security failures may significantly harm the CIS;
- (b)
the potential harm to others which may arise from interconnectivity and interdependency; and
- (c)
their individual responsibility and accountability for the security of CIS according to their roles within the systems and processes.