Australian Information Security Manual ISM-0298: A centralised and managed approach that maintains the integrity of patches or updates, and

A centralised and managed approach that maintains the integrity of patches or updates, and confirms that they have been applied successfully, is used to patch or update applications, operating systems, drivers and firmware.

Other controls in Guidelines for system management

ISM-0042 System administration processes, and supporting system administration procedures, are deve
ISM-0300 Patches, updates or other vendor mitigations for vulnerabilities in high assurance IT equi
ISM-0304 Applications other than office productivity suites, web browsers and their extensions, ema
ISM-1143 Patch management processes, and supporting patch management procedures, are developed, imp
ISM-1211 System administrators perform system administration activities in accordance with the syst
ISM-1380 Privileged users use separate privileged and unprivileged operating environments.
ISM-1385 Administrative infrastructure is segregated from the wider network and the internet.
ISM-1386 Network management traffic can only originate from administrative infrastructure.

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls