HKMA Cyber Resilience Assessment Framework (C-RAF)
Conducting the assessment: inherent risk, maturity and iCAST – HKMA Cyber Resilience Assessment Framework (C-RAF)

HKMA Cyber Resilience Assessment Framework (C-RAF) MA.2: Maturity attainment summary and gap identification

What does MA.2 require?

The institution records, for every component, the required and the actual maturity level and whether the requirement is met; components below the required level are the gaps and the areas of improvement, and the component-level gaps form its roadmap to the expected cyber resilience.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Conducting the assessment: inherent risk, maturity and iCAST – HKMA Cyber Resilience Assessment Framework (C-RAF)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll HKMA Cyber Resilience Assessment Framework (C-RAF) controls