The key controls and forms of assurance are too technical in nature and should focus more on the risk of a successful cyber-attack and not being detected.
Mae'r rheolaethau allweddol a'r mathau o sicrwydd yn rhy dechnegol eu natur a dylent ganolbwyntio mwy ar y risg o ymosodiad seiber llwyddiannus a pheidio â chael ei ganfod.