Skip to main content

๐Ÿ’ผ 65 An APRA-regulated institution would usually consider whether information security considerations are appropriately captured in contractual obligations and oversight arrangements. The regulated entity would also consider the scope, depth and independence of any certifications, attestations and assurance provided and take steps to address any limitations identified.

  • Contextual name: ๐Ÿ’ผ 65 An APRA-regulated institution would usually consider whether information security considerations are appropriately captured in contractual obligations and oversight arrangements. The regulated entity would also consider the scope, depth and independence of any certifications, attestations and assurance provided and take steps to address any limitations identified.
  • ID: /frameworks/apra-cpg-234/25/65
  • Located in: ๐Ÿ’ผ 25 Implementation of controls - Information assets managed by third parties and related parties

Descriptionโ€‹

Empty...

Similarโ€‹

  • Internal
    • ID: dec-c-cd57f490

Sub Sectionsโ€‹

SectionSub SectionsInternal RulesPoliciesFlags