A.1—Definitions
>Control Description
"Technology risk", which includes "cyber risk", refers to the risk arising from the inadequacy, disruption, destruction, failure, damage from unauthorised access, modifications, or malicious use of information technology assets, people or processes that enable and support business needs, and can result in financial loss and/or reputational damage.
A "Technology asset" is something tangible (e.g., hardware, infrastructure) or intangible (e.g., software, data, information) that needs protection and supports the provision of technology services.
"Technology" is broadly used in this Guideline to include "information technology" (IT), and "cyber" is broadly used to include "information security."
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.