Australian Information Security Manual ISM-1563: At the conclusion of a security assessment for a system, a security assessment report is p

At the conclusion of a security assessment for a system, a security assessment report is produced by the assessor and covers: - the scope of the security assessment - the system's strengths and weaknesses - security risks associated with the operation of the system - the effectiveness of the implementation of controls - any recommended remediation actions.

Other controls in Guidelines for cyber security documentation

ISM-0039 A cyber security strategy is developed, implemented and maintained.
ISM-0041 Systems have a system security plan that includes an overview of the system (covering the
ISM-0043 Systems have a cyber security incident response plan that covers the following: - guidelin
ISM-0047 Organisational-level cyber security documentation is approved by the chief information sec
ISM-0888 Cyber security documentation is reviewed at least annually and includes a 'current as at \
ISM-0912 Systems have a change and configuration management plan that includes: - the establishment
ISM-1163 Systems have a continuous monitoring plan that includes: - conducting vulnerability scans
ISM-1564 At the conclusion of a security assessment for a system, a plan of action and milestones i

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls