Telecommunications Sector Security Reforms (TSSR) TSRMP-11(3): TSRMP Rules s 11(3) and (5): baseline cyber framework for every relevant asset

The program must include a process or system to comply with one of the listed frameworks, as in force from time to time, and meet its condition within 12 months after the s 7(2) grace period ends: AS/NZS ISO/IEC 27001:2023; the ASD Essential Eight Maturity Model at maturity level one; the NIST Framework for Improving Critical Infrastructure Cybersecurity; the US Department of Energy Cybersecurity Capability Maturity Model at maturity level one; or the 2020-21 AESCSF Framework Core at security profile one. An equivalent framework, including its conditions, may be used instead (s 11(5)).