HKMA Cyber Resilience Assessment Framework (C-RAF)
Domain 7: Third-party risk management – HKMA Cyber Resilience Assessment Framework (C-RAF)

HKMA Cyber Resilience Assessment Framework (C-RAF) 7.2.A: 7.2 Third-party management: advanced level

Advanced control principles for third-party management (required, with baseline and intermediate, of an AI whose inherent risk is high). A termination or exit strategy exists for these third parties, preserving data ownership, confidentiality and portability after the relationship ends.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Domain 7: Third-party risk management – HKMA Cyber Resilience Assessment Framework (C-RAF)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.