ATO Digital Service Provider (DSP) Operational Security Framework
Registration, maintaining compliance and data breach reporting – ATO Digital Service Provider (DSP) Operational Security Framework

ATO Digital Service Provider (DSP) Operational Security Framework PROC.CHANGE: Notify the DPO of significant changes to the business or product

The DPO is notified as soon as practicable, through Online services for DSPs, of significant changes to the business or product environment, including a change of legal entity (merger, acquisition, divestment or large restructure), infrastructure (new platform, hosting provider or change in who controls hosting, DSP or client) or client base rising above 10,000 unique tax, accounting, payroll or superannuation client records (which can change the category).

Maintained by Gerard Blokdyk

What else in your programme already covers this

This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO 27002:2022 · 1 control

  • 5.5 Contact with authorities

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Registration, maintaining compliance and data breach reporting – ATO Digital Service Provider (DSP) Operational Security Framework

Query this from an agent

The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.