Australian Energy Sector Cyber Security Framework (AESCSF)

Cybersecurity program management (PROGRAM) – Australian Energy Sector Cyber Security Framework (AESCSF)

Australian Energy Sector Cyber Security Framework (AESCSF) PROGRAM-1h: PROGRAM-1h: Strategy updated periodically and on triggers

The program strategy is revised on a schedule and whenever defined triggers occur, including business changes, shifts in the operating environment and changes to the threat profile (THREAT-2e).

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Cybersecurity program management (PROGRAM) – Australian Energy Sector Cyber Security Framework (AESCSF)

PROGRAM-1a PROGRAM-1a: A cybersecurity program strategy exists
PROGRAM-1b PROGRAM-1b: Strategy sets goals and objectives for cybersecurity activities
PROGRAM-1c PROGRAM-1c: Strategy documented and aligned with mission, objectives and critical infrastructure risk
PROGRAM-1d PROGRAM-1d: Strategy defines oversight and governance
PROGRAM-1e PROGRAM-1e: Strategy defines the program's structure
PROGRAM-1f PROGRAM-1f: Strategy names the standards and guidelines to follow
PROGRAM-1g PROGRAM-1g: Strategy identifies compliance requirements
PROGRAM-2a PROGRAM-2a: Senior management supports the program

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Energy Sector Cyber Security Framework (AESCSF) controls