💼 16 The current threat landscape has necessitated information security capabilities that extend beyond information technology general controls to more specialised information security capabilities.

Contextual name: 💼 16 The current threat landscape has necessitated information security capabilities that extend beyond information technology general controls to more specialised information security capabilities.
ID: /frameworks/apra-cpg-234/05/16
Located in: 💼 5 Information security capability - Assessing sufficiency of capability

Description

Empty...

Section	Internal Rules	Policies
💼 16a vulnerability and threat management;	11	11
💼 16b situational awareness and intelligence;	6	7
💼 16c information security operations and administration;	2	2
💼 16d secure design, architecture and consultation;	1	1
💼 16e security testing, including penetration testing;	10	10
💼 16f information security reporting and analytics;	9	11
💼 16g incident detection and response, including recovery, notification and communication;	2	2
💼 16h information security investigation, including preservation of evidence and forensic analysis;
💼 16i information security assurance.