💼 8c policy framework — whether information security policies reflect Board expectations.

• Contextual name: 💼 8c policy framework — whether information security policies reflect Board expectations.
• ID: /frameworks/apra-cpg-234/01/08/c
• Located in: 💼 8 Under CPS 234, the Board of an APRA-regulated entity is ultimately responsible for the information security of the entity. In order for a Board to be able to more effectively discharge its responsibilities (including oversight, seeking assurance and, as appropriate, challenging management), it could consider the following:

Description

Empty...

Similar

• Internal
  • ID: dec-c-5deacdba

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags