Right Fit For Risk

Understand the security and assurance requirements that apply to your organisation.

Understand what is changing, when the revised requirements apply and what your organisation needs to do.

Understand each assurance stage, what you need to submit and when it is due.

Understand your responsibilities for third party systems, cloud services and Managed Service Providers.

Find the current templates for your Assurance Category and lifecycle stage.

Find practical guidance, independent certification information and external resources.

Find answers about the ESAF, RFFR submissions, assurance categories and ongoing obligations.

Notify the department of changes to your organisation.

Contact the RFFR team for support and guidance.

Understand the requirements and apply for approval before using artificial intelligence to deliver departmental services.