Australian Information Security Manual ISM-1809: When applications, operating systems, network devices or networked IT equipment that are n

When applications, operating systems, network devices or networked IT equipment that are no longer supported by vendors cannot be immediately removed or replaced, compensating controls are implemented until such time that they can be removed or replaced.

Other controls in Guidelines for system management

ISM-0042 System administration processes, and supporting system administration procedures, are deve
ISM-0298 A centralised and managed approach that maintains the integrity of patches or updates, and
ISM-0300 Patches, updates or other vendor mitigations for vulnerabilities in high assurance IT equi
ISM-0304 Applications other than office productivity suites, web browsers and their extensions, ema
ISM-1143 Patch management processes, and supporting patch management procedures, are developed, imp
ISM-1211 System administrators perform system administration activities in accordance with the syst
ISM-1380 Privileged users use separate privileged and unprivileged operating environments.
ISM-1385 Administrative infrastructure is segregated from the wider network and the internet.

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls