Skip to main content

๐Ÿ’ผ 27 Under CPS 234, all information assets must be classified by criticality2 and sensitivity3 . This includes infrastructure, ancillary systems such as environmental control systems and physical access control systems as well as information assets managed by third parties and related parties. Furthermore, APRA-regulated entities could benefit from considering the interrelationships between information assets, including identifying information assets which are not intrinsically critical or sensitive but could be used to compromise information assets which are critical or sensitive.

  • Contextual name: ๐Ÿ’ผ 27 Under CPS 234, all information assets must be classified by criticality2 and sensitivity3 . This includes infrastructure, ancillary systems such as environmental control systems and physical access control systems as well as information assets managed by third parties and related parties. Furthermore, APRA-regulated entities could benefit from considering the interrelationships between information assets, including identifying information assets which are not intrinsically critical or sensitive but could be used to compromise information assets which are critical or sensitive.
  • ID: /frameworks/apra-cpg-234/11/27
  • Located in: ๐Ÿ’ผ 11 Information asset identification and classification - Classification of all information assets by criticality and sensitivity

Descriptionโ€‹

Empty...

Similarโ€‹

  • Internal
    • ID: dec-c-0adf70c6

Sub Sectionsโ€‹

SectionSub SectionsInternal RulesPoliciesFlags