Australia Guidance for AI Adoption (2025) 3.4.3: 3.4.3 Conform to data breach reporting requirements

What else in your programme already covers this

This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Practice 3: Measure and manage risks – Australia Guidance for AI Adoption (2025)

• 3.1.1 3.1.1 Create an AI risk management framework, risk criteria and assessment processes
• 3.1.2 3.1.2 Manage risks from third parties and open-source AI
• 3.1.3 3.1.3 Report risk outcomes in consistent formats
• 3.2.1 3.2.1 Triage AI systems for enhanced or unacceptable risk
• 3.2.2 3.2.2 Assess each AI system's risks
• 3.2.3 3.2.3 Evaluate likelihood and consequence, including of not deploying
• 3.3.1 3.3.1 Plan and implement risk treatment and verify it
• 3.3.2 3.3.2 Communicate risk treatment plans