Australian Information Security Manual

Guidelines for personnel security

Australian Information Security Manual ISM-1508: Privileged access to systems and their resources is limited to only what is required for u

Privileged access to systems and their resources is limited to only what is required for users and services to undertake their duties.

Other controls in Guidelines for personnel security

ISM-0078 Systems processing, storing or communicating AUSTEO or AGAO data remain at all times under
ISM-0252 Cyber security awareness training is undertaken annually by all personnel and covers: - th
ISM-0258 A web usage policy is developed, implemented and maintained.
ISM-0405 Requests for unprivileged access to systems and their resources are validated when first r
ISM-0407 A secure record is maintained for the life of systems and their resources that covers the
ISM-0409 Foreign nationals, including seconded foreign nationals, do not have access to systems tha
ISM-0411 Foreign nationals, excluding seconded foreign nationals, do not have access to systems tha
ISM-0414 Personnel granted access to systems and their resources are uniquely identifiable.

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls