Australian Information Security Manual ISM-0100: Non-classified, OFFICIAL: Sensitive, PROTECTED and SECRET gateways undergo an IRAP assessm

Non-classified, OFFICIAL: Sensitive, PROTECTED and SECRET gateways undergo an IRAP assessment, using the latest release of the ISM available prior to the beginning of the IRAP assessment (or a subsequent release), at least every 24 months.

Other controls in Guidelines for gateways

ISM-0260 All web access, including that by internal servers, is conducted through web proxies.
ISM-0261 The following details are centrally logged for websites accessed via web proxies: - web ad
ISM-0263 TLS traffic communicated through gateways is decrypted and inspected.
ISM-0591 Evaluated peripheral switches are used when sharing peripherals between systems.
ISM-0597 When planning, designing, implementing or introducing additional connectivity to CDSs, ASD
ISM-0610 Users are trained on the secure use of CDSs before access is granted.
ISM-0611 System administrators for gateways are assigned the minimum privileges required to perform
ISM-0612 System administrators for gateways are formally trained on the operation and management of

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls