๐ผ 65 An APRA-regulated institution would usually consider whether information security considerations are appropriately captured in contractual obligations and oversight arrangements. The regulated entity would also consider the scope, depth and independence of any certifications, attestations and assurance provided and take steps to address any limitations identified.
- Contextual name: ๐ผ 65 An APRA-regulated institution would usually consider whether information security considerations are appropriately captured in contractual obligations and oversight arrangements. The regulated entity would also consider the scope, depth and independence of any certifications, attestations and assurance provided and take steps to address any limitations identified.
- ID:
/frameworks/apra-cpg-234/25/65
- Located in: ๐ผ 25 Implementation of controls - Information assets managed by third parties and related parties
Descriptionโ
Empty...
Similarโ
- Internal
- ID:
dec-c-cd57f490
- ID:
Sub Sectionsโ
Section | Sub Sections | Internal Rules | Policies | Flags |
---|