HKMA Cyber Resilience Assessment Framework (C-RAF)
Conducting the assessment: inherent risk, maturity and iCAST – HKMA Cyber Resilience Assessment Framework (C-RAF)

HKMA Cyber Resilience Assessment Framework (C-RAF) ICAST.7: iCAST reporting and management endorsement

What does ICAST.7 require?

After testing the institution produces an iCAST simulation test summary endorsed by management, attaches the threat intelligence report, and produces a simulation testing report on approach, results, observations and improvements in governance, policies and procedures, technical controls and awareness; a report from internal testers is reviewed and endorsed by management.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Conducting the assessment: inherent risk, maturity and iCAST – HKMA Cyber Resilience Assessment Framework (C-RAF)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.