DEFSTAN 05-138/2(2017) : 2017

Foreword
Cyber Security for Defence Suppliers
0. Introduction
1. A Key Output of the DCPP
2. The Cyber Security Model in Outline
3. Applicability
4. Warning
5. The Cyber Security Model in Detail
6. Risk Acceptance Process
7. Cyber Implementation Plan (CIP)
8. MOD Acceptance and Agreement of a CIP
9. Supply Chain Acceptance and Agreement of a CIP
Annex A - Cyber Risk Profiles
Annex B - CSM - Cyber Implementation Plan Template
Annex C - MOD Identifiable Information
Definitions
Abbreviations

Describes the measures Defence Suppliers are required to achieve at each of the levels of cyber risk a contract can be assessed as carrying.