Australian Information Security Manual ISM-0041: Systems have a system security plan that includes an overview of the system (covering the

Systems have a system security plan that includes an overview of the system (covering the system's purpose, the system boundary and how the system is managed) as well as an annex that covers applicable controls from this document and any additional controls that have been identified and implemented.

Other controls in Guidelines for cyber security documentation

ISM-0039 A cyber security strategy is developed, implemented and maintained.
ISM-0043 Systems have a cyber security incident response plan that covers the following: - guidelin
ISM-0047 Organisational-level cyber security documentation is approved by the chief information sec
ISM-0888 Cyber security documentation is reviewed at least annually and includes a 'current as at \
ISM-0912 Systems have a change and configuration management plan that includes: - the establishment
ISM-1163 Systems have a continuous monitoring plan that includes: - conducting vulnerability scans
ISM-1563 At the conclusion of a security assessment for a system, a security assessment report is p
ISM-1564 At the conclusion of a security assessment for a system, a plan of action and milestones i

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls