Information Security Risk – Safeguarding critical data and systems against cyber threats and implementing robust cybersecurity measures.
IT Infrastructure Risk – Ensuring resilience of IT systems against disruptions—plan for continuity and rapid recovery.
Software and Application Risk – Regularly assessing and managing application vulnerabilities to prevent breaches.
Data Privacy and Compliance Risk – Securing customer data, upholding privacy regulations and reporting breaches as required.
Vendor and 3rd Party Risk – Thoroughly assessing third-party services for security and compliance to protect data.
IT Project and Change Risk – Planning IT projects with risk management in mind and ensuring changes are well-structured and aligned with strategy.
IT Governance and Strategic Risk – Integrating IT strategy into the overall governance framework, addressing potential strategic risks.
Emerging Technology Risk – Understanding APRA’s stance on emerging technologies and assess associated risks.