Document ID: chunk:federal_register_of_legislation:F2024L01438:reg:1
Version: federal_register_of_legislation:F2024L01438
Segment Type: reg
Provision Reference: reg 1
Character Range: 97430–99151

1                                 Accredited entity                                                               All of the following:
                                                                                                                  (a) any fraud risks, threats and vulnerabilities, including any fraud risks eventuating through other entities interacting with the entity's DI data environment, that may impact the entity's DI data environment;
                                                                                                                  (b) an assessment of the significance of any fraud risks, threats and vulnerabilities;
                                                                                                                  (c) the strategies and controls the entity uses, or proposes to use, to manage the fraud risks, threats and vulnerabilities identified under paragraph (a), including strategies and controls to implement and maintain a positive fraud risk culture;
                                                                                                                  (d) the entity's level of tolerance of fraud risks;
                                                                                                                  (e) the risk ratings and scale the entity uses, or will use, when assessing the severity of a digital ID fraud incident; and
                                                                                                                  (f) the entity's key positions with responsibility for managing fraud risks and the duties of those positions.
                                    Goals and strategic objectives