Australian Information Security Manual ISM-1163: Systems have a continuous monitoring plan that includes: - conducting vulnerability scans

Systems have a continuous monitoring plan that includes: - conducting vulnerability scans for systems at least fortnightly - conducting vulnerability assessments and penetration tests for systems prior to deployment, including prior to deployment of significant changes, and at least annually thereafter - analysing identified vulnerabilities to determine their potential impact - implementing mitigations based on risk, effectiveness and cost.

Other controls in Guidelines for cyber security documentation

ISM-0039 A cyber security strategy is developed, implemented and maintained.
ISM-0041 Systems have a system security plan that includes an overview of the system (covering the
ISM-0043 Systems have a cyber security incident response plan that covers the following: - guidelin
ISM-0047 Organisational-level cyber security documentation is approved by the chief information sec
ISM-0888 Cyber security documentation is reviewed at least annually and includes a 'current as at \
ISM-0912 Systems have a change and configuration management plan that includes: - the establishment
ISM-1563 At the conclusion of a security assessment for a system, a security assessment report is p
ISM-1564 At the conclusion of a security assessment for a system, a plan of action and milestones i

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls