Bermuda Monetary Authority (BMA) Cyber Risk Management Code of Conduct BMA-7: Information Technology Audit Plan

IT Audit Plan. The third line of defence, IT audit, should provide the audit committee of the board (or equivalent) with independent assurance over the cyber risk programme through a risk-based IT audit plan (para 23).

Other controls in BMA Code Section V: Identification of Assets and Risks

BMA-12 Board and Senior Management Oversight
BMA-13 Asset Inventory
BMA-27 Cyber Insurance
BMA-3 Operational Cyber Risk Management Programme
BMA-4 Chief Information Security Officer
BMA-5 Three Lines of Defence
BMA-6 Risk Assessment Process
BMA-8 Third-Party, Outsourcing and Cloud Risk

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Bermuda Monetary Authority (BMA) Cyber Risk Management Code of Conduct controls