Australian Energy Sector Cyber Security Framework (AESCSF)

Cybersecurity program management (PROGRAM) – Australian Energy Sector Cyber Security Framework (AESCSF)

Australian Energy Sector Cyber Security Framework (AESCSF) PROGRAM-1g: PROGRAM-1g: Strategy identifies compliance requirements

The cybersecurity program strategy identifies the compliance requirements the program must meet, for example NERC CIP, the TSA pipeline security guidelines, PCI DSS, ISO standards or DoD CMMC.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Cybersecurity program management (PROGRAM) – Australian Energy Sector Cyber Security Framework (AESCSF)

PROGRAM-1a PROGRAM-1a: A cybersecurity program strategy exists
PROGRAM-1b PROGRAM-1b: Strategy sets goals and objectives for cybersecurity activities
PROGRAM-1c PROGRAM-1c: Strategy documented and aligned with mission, objectives and critical infrastructure risk
PROGRAM-1d PROGRAM-1d: Strategy defines oversight and governance
PROGRAM-1e PROGRAM-1e: Strategy defines the program's structure
PROGRAM-1f PROGRAM-1f: Strategy names the standards and guidelines to follow
PROGRAM-1h PROGRAM-1h: Strategy updated periodically and on triggers
PROGRAM-2a PROGRAM-2a: Senior management supports the program

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Energy Sector Cyber Security Framework (AESCSF) controls