Australian Energy Sector Cyber Security Framework (AESCSF)

Cybersecurity program management (PROGRAM) – Australian Energy Sector Cyber Security Framework (AESCSF)

Australian Energy Sector Cyber Security Framework (AESCSF) PROGRAM-2i: PROGRAM-2i: Program enables legal and regulatory compliance

The cybersecurity program addresses and supports achievement of applicable legal and regulatory compliance, with people responsible for knowing the obligations.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Cybersecurity program management (PROGRAM) – Australian Energy Sector Cyber Security Framework (AESCSF)

PROGRAM-1a PROGRAM-1a: A cybersecurity program strategy exists
PROGRAM-1b PROGRAM-1b: Strategy sets goals and objectives for cybersecurity activities
PROGRAM-1c PROGRAM-1c: Strategy documented and aligned with mission, objectives and critical infrastructure risk
PROGRAM-1d PROGRAM-1d: Strategy defines oversight and governance
PROGRAM-1e PROGRAM-1e: Strategy defines the program's structure
PROGRAM-1f PROGRAM-1f: Strategy names the standards and guidelines to follow
PROGRAM-1g PROGRAM-1g: Strategy identifies compliance requirements
PROGRAM-1h PROGRAM-1h: Strategy updated periodically and on triggers

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Energy Sector Cyber Security Framework (AESCSF) controls