Australian Energy Sector Cyber Security Framework (AESCSF)
Identity and access management (ACCESS) – Australian Energy Sector Cyber Security Framework (AESCSF)

Australian Energy Sector Cyber Security Framework (AESCSF) ACCESS-AP11: Anti-pattern: no policy ban on unauthorised devices reaching critical assets

What does ACCESS-AP11 require?

This anti-pattern is present when organisational policy does not prohibit users from connecting to critical assets from unknown or unauthorised devices, such as unmanaged personal computers, including by remote desktop; to attain the level it must be absent.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Identity and access management (ACCESS) – Australian Energy Sector Cyber Security Framework (AESCSF)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Australian Energy Sector Cyber Security Framework (AESCSF) controls