Australian Information Security Manual ISM-0027: System owners obtain an authorisation to operate for each non-classified, OFFICIAL: Sensit

System owners obtain an authorisation to operate for each non-classified, OFFICIAL: Sensitive, PROTECTED and SECRET system from its authorising officer.

Other controls in Guidelines for cyber security roles

ISM-0009 System owners, in consultation with each system's authorising officer, identify any supple
ISM-0714 A CISO is appointed to provide cyber security leadership and guidance for their organisati
ISM-0717 The CISO oversees the management of cyber security personnel within their organisation.
ISM-0718 The CISO regularly reports directly to their organisation's board of directors or executiv
ISM-0720 The CISO oversees the development, implementation and maintenance of a cyber security comm
ISM-0724 The CISO implements cyber security measurement metrics and key performance indicators for
ISM-0725 The CISO coordinates cyber security and business alignment through a cyber security steeri
ISM-0726 The CISO coordinates security risk management activities between cyber security and busine

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls