CTHIn ForceLegislation
Banking, Insurance, Life Insurance, Health Insurance and Superannuation (prudential standard) determination No. 1 of 2018
Information asset identification and claInformation asset identification and classification
Start here
Get a plain-English read of Information asset identification and cla
Turn the raw legal text into a practical explanation grounded in Banking, Insurance, Life Insurance, Health Insurance and Superannuation (prudential standard) determination No. 1 of 2018.
Information asset identification and classification
- An APRA-regulated entity must classify its information assets, including those managed by related parties and third parties, by criticality and sensitivity. This classification must reflect the degree to which an information security incident affecting an information asset has the potential to affect, financially or non-financially, the entity or the interests of depositors, policyholders, beneficiaries or other customers.