Contingency plan - IATF Sanctioned Interpretation 17

[Qualityx]

Dear All, according last SI 17 update about contingency plan, what shoud i change? The requirement about before update cyberattack web have already applied.

Thanks for help.

Update:

e) periodically test the contingency plans for effectiveness (e.g. simulations, as​

appropriate);​

cybersecurity testing may include a simulation of a cyber-attack, regular​

monitoring for specific threats, identification of dependencies and prioritization​

of vulnerabilities. The testing is appropriate to the risk of associated customer​

disruption;​

Note: cybersecurity testing may be managed internally by the organization or​

subcontracted as appropriate​

 

[Thee Bouyyy]

Dear All, according last SI 17 update about contingency plan, what shoud i change? The requirement about before update cyberattack web have already applied.

Thanks for help.


Update:
e) periodically test the contingency plans for effectiveness (e.g. simulations, as
appropriate);
cybersecurity testing may include a simulation of a cyber-attack, regular
monitoring for specific threats, identification of dependencies and prioritization
of vulnerabilities. The testing is appropriate to the risk of associated customer
disruption;
Note: cybersecurity testing may be managed internally by the organization or
subcontracted as appropriate

Firstly, can you let me know that what is SI 17?

 

[Johnny Quality]

Firstly, can you let me know that what is SI 17?

Thee Bouyy,

SI 17 is Sanctioned Interpretation 17 from the IATF available here

 

[UncleFester]

In the notes in S.I. 17 it states "This update provides details of what is to be tested as part of a cyber-attack contingency plan validation".

So the S.I. goes further into detail with the new blue text as to how you need to test your cyber security.

 

[Qualityx]

In the notes in S.I. 17 it states "This update provides details of what is to be tested as part of a cyber-attack contingency plan validation".

So the S.I. goes further into detail with the new blue text as to how you need to test your cyber security.

Thank You for explaining.