💼 10 Policy framework - Ongoing effectiveness and completeness

Stats

not available

Empty...

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 25 An APRA-regulated entity would typically periodically evaluate the effectiveness and completeness of its information security policy framework through a review of incidents that have occurred as well as comparisons to peers and established control frameworks and standards. Adjustments would be made to the policy framework to ensure its continued effectiveness. This assessment would typically also be conducted in response to a material change to information assets or the business environment.					no data