Australian Energy Sector Cyber Security Framework (AESCSF)

Cybersecurity program management (PROGRAM) – Australian Energy Sector Cyber Security Framework (AESCSF)

Australian Energy Sector Cyber Security Framework (AESCSF) PROGRAM-2e: Program responsibility assigned to a role with authority

What does PROGRAM-2e require?

Responsibility for the cybersecurity program is assigned to a role, such as a chief information security officer, with sufficient authority to carry it out.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Cybersecurity program management (PROGRAM) – Australian Energy Sector Cyber Security Framework (AESCSF)

PROGRAM-1a PROGRAM-1a: A cybersecurity program strategy exists
PROGRAM-1b PROGRAM-1b: Strategy sets goals and objectives for cybersecurity activities
PROGRAM-1c PROGRAM-1c: Strategy documented and aligned with mission, objectives and critical infrastructure risk
PROGRAM-1d PROGRAM-1d: Strategy defines oversight and governance
PROGRAM-1e PROGRAM-1e: Strategy defines the program's structure
PROGRAM-1f PROGRAM-1f: Strategy names the standards and guidelines to follow
PROGRAM-1g PROGRAM-1g: Strategy identifies compliance requirements
PROGRAM-1h PROGRAM-1h: Strategy updated periodically and on triggers

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Energy Sector Cyber Security Framework (AESCSF) controls