Q.4270 Which of the following regulatory approaches has been adopted by jurisdictions as a way of enforcing cyber-security strategy requirements among regulated entities?

I. Mandatory sector specific or cross-sector cyber-security requirements
II. A requirement to develop internal cyber-security strategies by financial institutions
III. Examining whether institutions have an active IT strategy and accompanying security provisions