Defence Security Principles Framework (DSPF) DSPF-P23: Cyber security assessment and authorisation

ICT systems must undergo security assessment and be formally authorised (accredited) to operate at the appropriate classification before handling official/classified information.

Other controls in DSPF: Information and Technology (Cyber) Security

DSPF-P20 Information and technology security - logging and monitoring
DSPF-P21-22 Information and technology security - physical and personnel
DSPF-P24 Information and technology security - incident management
DSPF-P25 Information and technology security - gateways and data transfer
DSPF-P26 Information and technology security - portable devices and media
DSPF-P27-29 Information and technology security - system planning, management and business impact

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Defence Security Principles Framework (DSPF) controls