Requirement 0114 (Part Four: Technology, section 15.3 Cyber Security Programs; applies to All entities; dated 01 July 2026; modified in Release 2026): Gateway capabilities that have completed an IRAP assessment (or ASD assessment for TOP SECRET gateways) against the latest version of ASD's Information Security Manual within the previous 24 months are used. Modified in Release 2026: gateway and secure service edge capabilities are assessed against the latest ISM within 24 months; ASD assesses TOP SECRET gateways.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.