Protective Security Policy Framework (PSPF) Release 2026
Part Four: Technology (sections 13 to 15) – Protective Security Policy Framework (PSPF) Release 2026

Protective Security Policy Framework (PSPF) Release 2026 0104: 0104 Essential Eight: restrict Microsoft Office macros to Maturity Level Two

Requirement 0104 (Part Four: Technology, section 14.2.6 Cyber Security Strategies; applies to All entities; dated 31 October 2024; retained from Release 2025): Restrict Microsoft Office macros mitigation strategy is implemented to Maturity Level Two under ASD's Essential Eight Maturity Model. Macros can be used to compromise workstations and exfiltrate or deny access to data.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Part Four: Technology (sections 13 to 15) – Protective Security Policy Framework (PSPF) Release 2026

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.