APRA issues guidance on IT security risk
The Australian Prudential Regulation Authority (APRA) has released a prudential practice guide to help safeguard firms against information technology security risks.
The guide stresses the importance of effective monitoring processes and robust IT security reporting, as well as the systematic life-cycle management of IT assets.
APRA’s Management of Security Risk in Information and Information Technology is intended for senior managers in addition to risk and IT security specialists.