CRA-5.8.16
  To ensure sufficient preparedness in responding to 
  (a) identify scenarios of cyber security risk  that the licensee  is most likely to be exposed to;
  (b) consider incidents in the capital market and the broader financial services industry;
  (c) assess the likely impact of these incidents to the licensee ; and
  (d) identify appropriate response plan and communication strategies that must be undertaken.
  Added: April 2019
 
  
        