The entity must demonstrate that it meets or exceeds the ACSC Essential Eight mitigation strategies at Maturity Level 2 across the corporate ICT systems used to correspond with Defence.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.