Timeframe for reporting
Within 10 business days of becoming aware of the security control weakness.
Type of obligation
Mandatory
Who this applies to
Entities regulated by the Australian Prudential Regulation Authority.
Description
You must notify the Australian Prudential Regulation Authority if you are aware of a material information security control weakness which you are unable to remediate in a timely manner.