💼 61 Typically, an APRA-regulated entity would only authorise the use of new technologies in a production environment where the technology:

Stats

not available

Empty...

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 61a has matured to a state where there is a generally agreed set of industry-accepted controls to manage the security of the technology;					no data
💼 61b compensating controls are sufficient to reduce residual risk within the entity’s risk appetite.					no data