Is aware of the With supervision, Enhances Advances best 1. need for contributes to organisational IS practice in third organisations to developing or through broad party manage the maintaining influence on third management information compliance by party with respect to 2. Third Party A7 security of third third parties to management information Management parties contracting security authority's IS policies and standards Demonstrates Understands Produces Influences 1. awareness of the how to produce complex risk development of causes of risk assessments assessments risk assessment information risk that influence methodologies and their senior risk across and Risk 2. B1 implications owners, beyond an Assessment managers or organisation other stakeholders 1. Demonstrate Contributes to Advises Advances the awareness of management of management on practice of techniques to risks to information risk information risk manage information across a management Risk B2 information risk systems with business unit or across the public 2. Management supervision organisation sector or an industry sector or internationally
A7 Third Party Management Is aware of the need for organisations to manage the information security of third parties With supervision, contributes to developing or maintaining compliance by third parties to contracting authority's IS policies and standards Enhances organisational IS through broad influence on third party management Advances best practice in third party management with respect to information security 1. 2. B1 Risk Assessment Demonstrates awareness of the causes of information risk and their implications Understands how to produce risk assessments Produces complex risk assessments that influence senior risk owners, managers or other stakeholders Influences development of risk assessment methodologies across and beyond an organisation 1. 2. B2 Risk Management Demonstrate awareness of techniques to manage information risk Contributes to management of risks to information systems with supervision Advises management on information risk across a business unit or organisation Advances the practice of information risk management across the public sector or an industry sector or internationally 1. 2.
45_Evidence_Form_Template.docx