Australian Information Security Manual

Guidelines for personnel security

Australian Information Security Manual ISM-2071: Personnel dealing with user account details are advised of what social engineering attacks

Personnel dealing with user account details are advised of what social engineering attacks are, how to manage such situations and how to report them.

Other controls in Guidelines for personnel security

ISM-0078 Systems processing, storing or communicating AUSTEO or AGAO data remain at all times under
ISM-0252 Cyber security awareness training is undertaken annually by all personnel and covers: - th
ISM-0258 A web usage policy is developed, implemented and maintained.
ISM-0405 Requests for unprivileged access to systems and their resources are validated when first r
ISM-0407 A secure record is maintained for the life of systems and their resources that covers the
ISM-0409 Foreign nationals, including seconded foreign nationals, do not have access to systems tha
ISM-0411 Foreign nationals, excluding seconded foreign nationals, do not have access to systems tha
ISM-0414 Personnel granted access to systems and their resources are uniquely identifiable.

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls