Bermuda Monetary Authority (BMA) Cyber Risk Management Code of Conduct BMA-5: Three Lines of Defence

Three Lines of Defence. Cyber risk governance should follow a three lines of defence model (operational management; risk and compliance oversight; internal audit) (para 19).

Other controls in BMA Code Section V: Identification of Assets and Risks

BMA-12 Board and Senior Management Oversight
BMA-13 Asset Inventory
BMA-27 Cyber Insurance
BMA-3 Operational Cyber Risk Management Programme
BMA-4 Chief Information Security Officer
BMA-6 Risk Assessment Process
BMA-7 Information Technology Audit Plan
BMA-8 Third-Party, Outsourcing and Cloud Risk

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Bermuda Monetary Authority (BMA) Cyber Risk Management Code of Conduct controls