Back

Include the outsource partners in the strategic plan, as necessary.


CONTROL ID
13960
CONTROL TYPE
Establish/Maintain Documentation
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish, implement, and maintain a strategic plan., CC ID: 12784

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • the planning of outsourcing arrangements, including: (4.7 42(c), Final Report on EBA Guidelines on outsourcing arrangements)
  • strategic development of the institution's organisational and operational structure of IT and of the outsourcing of IT services; (II.1.2(a), Circular 10/2017 (BA): Supervisory Requirements for IT in Financial Institutions, 14.09.2018)
  • Provide subject matter expertise to planning efforts with internal and external cyber operations partners. (T0764, National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework, NIST Special Publication 800-181)
  • Provide subject matter expertise to planning efforts with internal and external cyber operations partners. (T0764, Reference Spreadsheet for the Workforce Framework for Cybersecurity (NICE Framework)”, July 7, 2020)