
You are correct.
Doug should immediately register the Information Security Policy deviation, and document any compensating controls that he can put in place until the non-compliance issue can be fully remediated. He should also consult his Line 1 Risk team to develop a remediation plan and timeframe, seeking support from DPG as appropriate.
Not quite.
Doug should immediately register the Information Security Policy deviation, and document any compensating controls that he can put in place until the non-compliance issue can be fully remediated. He should also consult his Line 1 Risk team to develop a remediation plan and timeframe, seeking support from DPG as appropriate.
Information Security Policy Deviations
Doug has been in his role for some time, and has been applying CBA’s Information Security Policy and Standards to ensure Group and customer information in his service remains protected. However, a change to the one of the Standards means Doug’s service is suddenly non-compliant.


Congratulations, you've finished Topic 7
You have reached the end of your journey, select the button below to complete this module.