What is SRAA?
SRAA (Security Risk Assessment and Audit) is the programme under which Hong Kong government departments and government-funded organisations must obtain a Verification Report covering cybersecurity risk assessment and audit activities, typically delivered through Security Risk Assessment (SRA) and Security Audit (SA) by an independent provider.














