References and Links

The ESAF outlines how the department gains assurance over External IT Systems and provides information for organisations in relation to the security and assurance requirements that they must meet under the ESAF.

Outlines what the DEWR ISMS Scheme is, who it is for, and key considerations for all applicable stakeholders.

Certifying Bodies accredited by JAZANZ can issue ISO/IEC 27001 and DEWR ISMS Scheme assessment reports and certificates.

The PSPF sets out Australian Government policy across six security domains and prescribes what Australian Government entities must do to protect their people, information and resources, both domestically and internationally.

The Australian Cyber Security Centre (ACSC) leads the Australian Government’s efforts to improve cyber security. The ACSC helps make Australia the safest place to connect online.

The Australian Signals Directorate (ASD) produces the Information security manual (ISM). The ISM is a cyber security framework that an organisation can apply, using their risk management framework, to protect their information technology and operational technology systems from cyber threats.