HKMA Cyber Resilience Assessment Framework (C-RAF)
Domain 3: Protection – HKMA Cyber Resilience Assessment Framework (C-RAF)

HKMA Cyber Resilience Assessment Framework (C-RAF) 3.1.A: 3.1 Access control: advanced level

Advanced control principles for access control (required, with baseline and intermediate, of an AI whose inherent risk is high). On a risk basis, access controls protect collaborative computing devices and applications (networked whiteboards, cameras, microphones, instant messaging, document sharing); controls block malware and man-in-the-middle attacks on customer authentication for high-risk transactions; tokenisation is considered to substitute unique values for confidential data (for example virtual cards).

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Domain 3: Protection – HKMA Cyber Resilience Assessment Framework (C-RAF)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.