Security and privacy

(unchanged)

Defining and operating a framework of security controls and security management strategies.

(unchanged)

Protecting against and managing risks related to the use, storage and transmission of data and information systems.

(modified)

Implementing and promoting compliance with information and data management legislation.

(unchanged)

Conducting applied research to discover, evaluate and mitigate new or unknown security vulnerabilities and weaknesses.

(unchanged)

Developing and sharing actionable insights on current and potential security threats to the success or integrity of an organisation.