Critical Infrastructure Risk Management Program (CIRMP) Rules 2023
Part 2 enhanced requirements: additional material risks, cyber, credential, lateral movement, personnel, supply chain and physical (nine asset classes) – Critical Infrastructure Risk Management Program (CIRMP) Rules 2023

Critical Infrastructure Risk Management Program (CIRMP) Rules 2023 8A(3): s 8A(3) Enhanced cyber framework: 27001:2023, Essential Eight level two, CSF 2.0, C2M2 v2.1 MIL2 or AESCSF 2023 SP2, or an equivalent

A responsible entity for an enhanced-class asset must establish and maintain a process or system in its CIRMP to comply with a framework in one of the listed documents as in force from time to time and meet its condition: AS ISO/IEC 27001:2023; the ASD Essential Eight Maturity Model at maturity level two; the NIST Cybersecurity Framework 2.0; the US Department of Energy C2M2 version 2.1 at maturity indicator level 2; or the 2023 AESCSF Framework Core at security profile 2; or another framework achieving a level of security equivalent to the Essential Eight, C2M2 or AESCSF items with their conditions.

Maintained by Gerard BlokdykControl text last updated

Other controls in Part 2 enhanced requirements: additional material risks, cyber, credential, lateral movement, personnel, supply chain and physical (nine asset classes) – Critical Infrastructure Risk Management Program (CIRMP) Rules 2023

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Critical Infrastructure Risk Management Program (CIRMP) Rules 2023 controls