Topic

Reporting cyber security incidents to ASD

Applicable to

all

History

Priority

should

Sep 2023

Cyber security incidents are reported to ASD as soon as possible after they occur or are discovered.

References to ‘ACSC’ were replaced with ‘ASD’.

Jun 2023

Cyber security incidents are reported to the ACSC as soon as possible after they occur or are discovered.

The existing control relating to the reporting of cyber security incidents to the Australian Cyber Security Centre (ACSC) was amended to recommend that this should occur as soon as possible after they occur or are discovered. This allows the ACSC to work with an organisation to determine the extent of any assistance they may require in responding to the cyber security incident.

Mar 2023

Cyber security incidents are reported to the ACSC.

The existing control relating to reporting cyber security incidents to the Australian Cyber Security Centre has been mapped to Essential Eight Maturity Level Three of the Essential Eight Maturity Model reflecting that this is part of actioning signs of compromise.

May 2019

Cyber security incidents are reported to the ACSC.

Security control 0140 was reworded.

Apr 2019

Cyber security incidents are reported to the ACSC using the CSIR scheme.

2015

Agencies should formally report cyber security incidents using the CSIR scheme.

2010

Agencies should formally report cyber security incidents using the CSER scheme.

2008

Agencies should formally report ICT security incidents using the ISIR scheme.