Skip to main content

πŸ’Ό 15 In discharging its responsibility for information security, an APRA-regulated entity would typically assess the sufficiency of its information security capability. This could include reviewing the adequacy of resourcing, including funding and staffing, timely access to necessary skill sets and the comprehensiveness of the control environment β€” preventative, detective and responsive.

  • Contextual name: πŸ’Ό 15 In discharging its responsibility for information security, an APRA-regulated entity would typically assess the sufficiency of its information security capability. This could include reviewing the adequacy of resourcing, including funding and staffing, timely access to necessary skill sets and the comprehensiveness of the control environment β€” preventative, detective and responsive.
  • ID: /frameworks/apra-cpg-234/05/15
  • Located in: πŸ’Ό 5 Information security capability - Assessing sufficiency of capability

Description​

Empty...

Similar​

  • Internal
    • ID: dec-c-6b96178b

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags