If the assessor determines that the entity’s responses are sufficient, and that the entity will reach an acceptable level of cyber security hygiene, the entity is to be advised to submit an uplift letter.

Purpose:

Whilst the entity has submitted a suitable action plan, they may need time to implement the actions identified. When providing acceptance of the action plan, the entity is also advised to submit an uplift letter; once all actions have been implemented.

Action Required:

1. The assessor is to email the entity, advising them of their action plan acceptance; using the template correspondence provided on the templates inbox.
2. File the sent email on objective and update the Uplift Tracker to note the date on which the advice was sent. A comment should also be added for verbose tracking.
3. Update the status in the Uplift Tracker to Letter Temple Sent.