Australian Information Security Manual

Guidelines for cyber security roles

Australian Information Security Manual ISM-1918: The CISO regularly reports directly to their organisation's audit, risk and compliance com

The CISO regularly reports directly to their organisation's audit, risk and compliance committee (or equivalent) on cyber security matters.

Other controls in Guidelines for cyber security roles

ISM-0009 System owners, in consultation with each system's authorising officer, identify any supple
ISM-0027 System owners obtain an authorisation to operate for each non-classified, OFFICIAL: Sensit
ISM-0714 A CISO is appointed to provide cyber security leadership and guidance for their organisati
ISM-0717 The CISO oversees the management of cyber security personnel within their organisation.
ISM-0718 The CISO regularly reports directly to their organisation's board of directors or executiv
ISM-0720 The CISO oversees the development, implementation and maintenance of a cyber security comm
ISM-0724 The CISO implements cyber security measurement metrics and key performance indicators for
ISM-0725 The CISO coordinates cyber security and business alignment through a cyber security steeri

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls