Requirement 0109 (Part Four: Technology, section 15.2 Cyber Security Programs; applies to All entities; dated 31 October 2024; retained from Release 2025): Cloud Service Providers that have completed an IRAP assessment against the latest version of ASD's Information Security Manual within the previous 24 months are used. The assessment must be against the latest ISM version.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.