data-handling practices, audit readiness, IT vendor sourcing, IT governance frameworks, procurement activities, MAS Technology Risk Management, IT risk register, risk and compliance reports, Cybersecurity Act