Australian Information Security Manual ISM-1883: Privileged user accounts explicitly authorised to access online services are strictly limi

Privileged user accounts explicitly authorised to access online services are strictly limited to only what is required for users and services to undertake their duties.

Other controls in Guidelines for personnel security

ISM-0078 Systems processing, storing or communicating AUSTEO or AGAO data remain at all times under
ISM-0252 Cyber security awareness training is undertaken annually by all personnel and covers: - th
ISM-0258 A web usage policy is developed, implemented and maintained.
ISM-0405 Requests for unprivileged access to systems and their resources are validated when first r
ISM-0407 A secure record is maintained for the life of systems and their resources that covers the
ISM-0409 Foreign nationals, including seconded foreign nationals, do not have access to systems tha
ISM-0411 Foreign nationals, excluding seconded foreign nationals, do not have access to systems tha
ISM-0414 Personnel granted access to systems and their resources are uniquely identifiable.

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls