scope:

This certifiable standard gives requirements for establishing, implementing, maintaining and continually improving a cyber risk assessment system within the context of the Company's SMS. All the elements for compliance with this certifiable standard should therefore be traceable within the SMS by direct inclusion or reference. Conformity with this standard may be displayed by; Company statement or certificate of conformity 2nd party statement or certificate of conformity Independent third party statement or certificate of conformity [standard wording re the different paths for certification] The recommendations set out in this document are applicable to Companies as defined below.