History

Priority

must

Nov 2018

Removed

Removed to ensure a focus on CISOs as the authority for all cyber security matters within organisations.

2017

Agencies must appoint at least one officer, commonly referred to as an ITSO, who is expert inadministering and configuring a broad range of systems as well as analysing and reporting oninformation security issues.

Control Text Changed. No public explaination.

2015

Agencies must appoint at least one expert, commonly referred to as an ITSO, in administeringand configuring a broad range of systems as well as analysing and reporting on informationsecurity issues.

2010

Agencies must appoint at least one ITSO.