Skip to main content

💼 10 Policy framework - Ongoing effectiveness and completeness

  • Contextual name: 💼 10 Policy framework - Ongoing effectiveness and completeness
  • ID: /frameworks/apra-cpg-234/10
  • Located in: 💼 APRA CPG 234

Description​

Empty...

Similar​

  • Internal
    • ID: dec-b-e0640cf4

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
💼 25 An APRA-regulated entity would typically periodically evaluate the effectiveness and completeness of its information security policy framework through a review of incidents that have occurred as well as comparisons to peers and established control frameworks and standards. Adjustments would be made to the policy framework to ensure its continued effectiveness. This assessment would typically also be conducted in response to a material change to information assets or the business environment.