Australian Information Security Manual ISM-1636: System owners, in consultation with each system's authorising officer, ensure controls for

System owners, in consultation with each system's authorising officer, ensure controls for each non-classified, OFFICIAL: Sensitive, PROTECTED and SECRET system and its operating environment undergo a security assessment by their organisation's own assessors or Infosec Registered Assessor Program (IRAP) assessors to determine if they have been implemented correctly and are operating as intended.

Other controls in Guidelines for cyber security roles

ISM-0009 System owners, in consultation with each system's authorising officer, identify any supple
ISM-0027 System owners obtain an authorisation to operate for each non-classified, OFFICIAL: Sensit
ISM-0714 A CISO is appointed to provide cyber security leadership and guidance for their organisati
ISM-0717 The CISO oversees the management of cyber security personnel within their organisation.
ISM-0718 The CISO regularly reports directly to their organisation's board of directors or executiv
ISM-0720 The CISO oversees the development, implementation and maintenance of a cyber security comm
ISM-0724 The CISO implements cyber security measurement metrics and key performance indicators for
ISM-0725 The CISO coordinates cyber security and business alignment through a cyber security steeri

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls