The Banking Executive Accountability Regime was enacted in February 2018; a month later the Australian Prudential Regulation Authority released a consultation draft of its new Prudential Standard CPS 234 on information security. It requires that an APRA-regulated entity ‘clearly define the...