ADGM FSRA Information Technology Risk Management Guidance (VER01.201124) 1.2: Ensure the Governing Body, senior management, staff and third parties are competent to manage IT risk

What does 1.2 require?

The Governing Body and senior management each include members able to understand and manage the IT risks the institution faces, and consider dedicated roles such as a chief technology officer or chief information security officer where the scale and intricacy of the IT estate warrants. Staff have the skills and knowledge their roles require, above all in technical roles; a competency framework across functions guides hiring, appraisal and training and the institution supports staff development; and competence to deliver is a factor in selecting contractors, freelancers and hardware and software vendors.