Requirement 0111 (Part Four: Technology, section 15.2.1 Cyber Security Programs; applies to All entities; dated 01 July 2026; modified in Release 2026): Security classified or systems of government significance information and data is securely hosted using a Cloud Service or Data Centre Service that has been certified against the Australian Government Hosting Certification Framework or the Australian Government Hosting Certification Framework 2. Modified in Release 2026: certification under the Framework or Framework 2 (available from late 2026 or early 2027) for OFFICIAL: Sensitive and above and for Systems of Government Significance; SECRET and TOP SECRET cloud hosting only via community or private clouds; foreign ownership of providers creates extrajudicial risk.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.