Check the checklist below, we can help if you need :
- Q1-Have you identified all third parties (service providers, vendors, partners, etc) involved in managing your data information assets ? also do you have their collective Role and Responsibilities?
- Q2– Have you identified and categorised all data information assets managed/ accessed by third parties?
- Q3 – Do you have an up-to-date information security policy framework?
- Q4– Have you formally reviewed suppliers:
- Information security capability and their security controls in place?
- Incident management processes?
- Relevant Contract, T&C and privacy statements (review and update their contract is required)
- Q5-Do you have an updated internal audit policy to include thirds parties?
- Q6 – Do you have a process in place for the regular review of all the abov
please see the full APRA’s CPS requirement here
