ASD Essentials for Enterprise IT PRO-01: Secure system lifecycle: design for visibility, authorised access, data protection, minimal privilege and exposure, and secure build and deployment

What does PRO-01 require?

Systems are designed so that they can be observed, admit only authorised access, protect their data, run with the least privilege needed (including defaults), expose as few services as possible and carry no unneeded functionality, and the build and deployment pipeline enforces those controls the same way on every system. Marked across the technical domains.