Australian Information Security Manual
Guidelines for procurement and outsourcing

Australian Information Security Manual ISM-1073: Contracts before provider system access

An organisation's systems are not accessed or administered by a service provider unless a contractual arrangement exists between the organisation and the service provider to do so.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Guidelines for procurement and outsourcing

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.