Australian Energy Sector Cyber Security Framework (AESCSF)

Cybersecurity program management (PROGRAM) – Australian Energy Sector Cyber Security Framework (AESCSF)

Australian Energy Sector Cyber Security Framework (AESCSF) PROGRAM-2h: Independent review of conformance with policies

What does PROGRAM-2h require?

People independent of the activity check, on a schedule and when triggered by events such as process changes, whether cybersecurity activities follow the organisation's policies and procedures.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Cybersecurity program management (PROGRAM) – Australian Energy Sector Cyber Security Framework (AESCSF)

PROGRAM-1a PROGRAM-1a: A cybersecurity program strategy exists
PROGRAM-1b PROGRAM-1b: Strategy sets goals and objectives for cybersecurity activities
PROGRAM-1c PROGRAM-1c: Strategy documented and aligned with mission, objectives and critical infrastructure risk
PROGRAM-1d PROGRAM-1d: Strategy defines oversight and governance
PROGRAM-1e PROGRAM-1e: Strategy defines the program's structure
PROGRAM-1f PROGRAM-1f: Strategy names the standards and guidelines to follow
PROGRAM-1g PROGRAM-1g: Strategy identifies compliance requirements
PROGRAM-1h PROGRAM-1h: Strategy updated periodically and on triggers

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Energy Sector Cyber Security Framework (AESCSF) controls