The External Systems Assurance Framework (ESAF) is being updated to support a proportionate and risk-based approach to assurance.
The updated ESAF comes into effect from 1 October 2026.
To support providers, the department has transition arrangements to move to the updated ESAF.