The ITSC ensures an effective IT strategic planning process; guides the IT strategy and its alignment to the bank's strategy; satisfies itself that IT and information security governance is accountable, effective, resourced and clear; ensures processes to assess and manage IT and cyber risk; ensures IT and cybersecurity budgets suit the bank's IT maturity, digital depth, threat environment and industry standards and are used as intended; reviews organisational arrangements so security concerns are escalated; reviews BCP and DR adequacy at least annually; reviews IT capacity assessments; and approves standards and procedures for need-based access.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.