2019-11-27
This helpsheet provides a framework for firms to self-assess their cyber security posture against international standards without serving as formal regulatory guidance. It outlines essential technical and people controls, including the five pillars of cyber security, defense in depth measures, and mandatory staff training topics. The document further details required board oversight metrics, such as vulnerability status, incident reporting, and compliance status, to ensure robust governance and risk management.