Defence Security Principles Framework (DSPF) DSPF-P27-29: Information and technology security - system planning, management and business impact

ICT systems must be planned, managed and operated with consideration of business impact levels, including secure configuration, change management and ongoing maintenance.

Other controls in DSPF: Information and Technology (Cyber) Security

DSPF-P20 Information and technology security - logging and monitoring
DSPF-P21-22 Information and technology security - physical and personnel
DSPF-P23 Cyber security assessment and authorisation
DSPF-P24 Information and technology security - incident management
DSPF-P25 Information and technology security - gateways and data transfer
DSPF-P26 Information and technology security - portable devices and media

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Defence Security Principles Framework (DSPF) controls