The banks note that these holds are an important element of their risk management process.
IT security shall be based on a risk management process.
