History

Priority

should

Jul 2020

Removed

Security control 0873 was removedas this security risk is better addressed byother security controls,such as 1452, 1567, 1568 and 1572.

Jun 2020

If using an outsourced information technology or cloud service, a service provider whose systems are located in Australia is used.

Mar 2020

If using an outsourced information technology or cloud service, a service provider whose systems are located in Australia is used.

Security 0873 was modified to reflect the outcomes of the independent review of the ACSC’s Cloud Services Certification Program.

Jan 2020

If using an outsourced information technology service, or cloud service not listed on the ACSC’s Certified Cloud Services List, a service provider whose systems are located in Australia is used.

2017

Agencies intending to use service providers not on ASD’s Certified Cloud Services List (CCSL)must ensure that service providers are located in Australia.

Control Text Changed. No public explaination.

2015

Agencies must ensure that service providers’ systems are located in Australia if they store orprocess government information and are not listed on ASD’s Certified Cloud Services List.

2010

Service providers’ systems should be located in Australia.