Requirement 0221 (Part Four: Technology, section 13.5 Technology Lifecycle Management; applies to All entities; dated 01 July 2026; new in Release 2026): The Australian Government Commonwealth Technology Standard and its annexes are applied when authorising technology systems to operate up to SECRET. New in Release 2026 (Directions 001-2023, 001-2025, 002-2025 and 004-2025 integrated): the Standard (on GovTEAMS) sets the Commonwealth Technology Management process, the Applications Policy and Deny List, risk assessment for unlisted products, evaluation and exemptions; all products, applications and web services need approval, and social media applications from vendors subject to conflicting foreign directions need a risk assessment; not applicable to TOP SECRET systems.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.