Australian Information Security Manual

Guidelines for gateways

Australian Information Security Manual ISM-0611: System administrators for gateways are assigned the minimum privileges required to perform

System administrators for gateways are assigned the minimum privileges required to perform their duties.

Other controls in Guidelines for gateways

ISM-0100 Non-classified, OFFICIAL: Sensitive, PROTECTED and SECRET gateways undergo an IRAP assessm
ISM-0260 All web access, including that by internal servers, is conducted through web proxies.
ISM-0261 The following details are centrally logged for websites accessed via web proxies: - web ad
ISM-0263 TLS traffic communicated through gateways is decrypted and inspected.
ISM-0591 Evaluated peripheral switches are used when sharing peripherals between systems.
ISM-0597 When planning, designing, implementing or introducing additional connectivity to CDSs, ASD
ISM-0610 Users are trained on the secure use of CDSs before access is granted.
ISM-0612 System administrators for gateways are formally trained on the operation and management of

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls