Search

Categories

System Hardening Gateways Cryptography Networking System Management Communications Infrastructure Personnel Security Media Enterprise Mobility Software Development Communications Systems Procurement and Outsourcing Email Information Technology Equipment Cyber Security Roles Database Systems Cyber Security Incidents Data Transfers System Monitoring ICT Equipment

4 controls

Outsourcing

ISM-1529

Only community or private clouds are used for outsourced SECRET and TOP SECRET cloud services.

ISM-1570

Outsourced cloud service providers and their cloud services undergo a security assessment by an IRAP assessor at least every 24 months.

ISM-1575

A minimum notification period of one month for the cessation of any services by a service provider is documented in contractual arrangements.

ISM-1739

A system’s security architecture is approved prior to the development of the system.

Last updated October 1, 2024

The Information Security Manual and its controls are written by the Australian Cyber Security Centre.
Built with Hugo. Theme Stack designed by Jimmy