Telecommunications Sector Security Reforms (TSSR) TSRMP-11(4): TSRMP Rules s 11(4) and (5): uplifted cyber framework for carrier assets

For a critical telecommunications asset owned or operated by a carrier, the program must also include a process or system to comply with one of: the Essential Eight Maturity Model at maturity level two; the Cybersecurity Capability Maturity Model at maturity level two; or the 2020-21 AESCSF Framework Core at security profile two, meeting the condition within 24 months after the grace period ends, or an equivalent framework with equivalent conditions. Home Affairs describes this as the most significant difference from the general CIRMP Rules.