History

Priority

must

Nov 2018

Removed

Removed due to a merge of relevant content into security control 0100.

2017

Cloud services storing, processing or communicating Australian government information mustundergo an Information Security Registered Assessor Program security assessment and beawarded certification by ASD at least every two years.

Control Text Changed. No public explaination.

2015

Cloud services storing, processing or communicating Australian government informationmust undergo an Information Security Registered Assessor Program Audit and be awardedcertification by ASD at least every two years, or sooner in the event of:•••••significant changes in information security policiesdetection of new or emerging threats to systemsthe discovery that security measures are not operating as effectively as planneda major cyber security incidentchanges to the system architecture or its security risk profile.