QUESTION
Are updates to cybersecurity policies and standards publicly available?
1:54:00
·
30 sec
The chief information security officer explains that many cybersecurity policies are available only internally, but a subset is made public.
- Internal cybersecurity policies, standards, and guidance are not publicly available
- A subset of those policies is made available publicly
- When internal policies are updated, relevant updates are also made to the public-facing versions
Jennifer Gutiérrez
1:54:00
Do you know if the updates are publicly available?
Kelly Moan
1:54:05
So a lot of our policies rightfully so are only available internally.
1:54:11
We also have subset of policies that are made available publicly and and typically updates as they're made internally to the internal policies.
1:54:22
And standards and guidance, the relevant updates to the public facing site would be made as well.
