NATS-Annual-Report-2015

Annual Report and Accounts 2015 | NATS Holdings Limited
Governance 72
Reports from Board Committees
(continued)
> Business Continuity: The Committee supports the
activities undertaken by the Executives to ensure
appropriate Crisis Management arrangements remain in
place and effective. Review of procedures and training
exercises for the Silver Teams at Prestwick and Swanwick
have taken place. Further to this, a comprehensive
review of Gold Team arrangements and facilities has
been completed. We will monitor the implementation of
the identified changes during the following year.
> Vetting: NATS has a mature vetting process, with direct
access to the Police National Computer and a newly
introduced online vetting process via an outsourced
service hosted by the Foreign and Commonwealth
Office. Key performance indicators are reported which
demonstrate the effectiveness and coverage of the
process.
c. Cyber security
As the sole provider of UK en route air traffic management,
NATS is part of the UK’s critical national infrastructure.
NATS is also diverse in its business operations, with activities
underway in the UK and overseas. NATS relies on effective
digital operations to deliver services and therefore places
a very high priority on cyber security. It is recognised that
NATS must be prepared for a variety of threats from a
multitude of sources.
NATS remains committed to the active management of
cyber security risks and has, over the past 12 months,
employed a new Chief Information Security Officer (CISO)
and significantly increased the resources dedicated to this
area through an agreement with PricewaterhouseCoopers
(PwC).
Through regular review of the strategy, and of progress
against a detailed cyber plan, the Committee has sought
to ensure that the protection of people, infrastructure and
operations is maintained at a high level and that, within
each of these domains, NATS maintains an active security
management system.
A new, mandatory cyber security change programme was
launched in early 2015 and work has continued to attain ISO
27001 certification, the international quality standard for
information security management. NATS will be undergoing
the required ISO 27001 external audits in the middle of
2015.
Iain McNicoll, CB CBE
Chairman of the Safety Review Committee
Governance