Glossary

19 entries

au-compliance frameworks acsc-glossary

ACSC

The Australian Cyber Security Centre, part of ASD. Alerts, advice, assistance. cyber.gov.au and 1300 CYBER1.

frameworks au-compliance hardening acsc-glossary

ASD's framework series, launched on 15 October 2026 to replace the Essential Eight, according to iTnews and techpartner.news. It covers enterprise IT, cloud and operational technology, and uses principles, actions and domains instead of maturity levels.

practitioner frameworks au-compliance network hardening soci

ASD Essentials for OT

The operational technology chapter of ASD Essentials, the framework ASD launched on 15 October 2026 to replace the Essential Eight. iTnews and techpartner.news report that the series covers OT alongside enterprise IT and cloud; neither reported the OT chapter's specific contents.

practitioner frameworks au-compliance cloud hardening

ASD Essentials for cloud

The cloud chapter of ASD Essentials, the framework ASD launched on 15 October 2026 to replace the Essential Eight. iTnews and techpartner.news report that the series covers cloud alongside enterprise IT and OT; neither reported the cloud chapter's specific contents.

practitioner frameworks au-compliance hardening

ASD Essentials for enterprise IT

The enterprise IT chapter of ASD Essentials, the framework ASD launched on 15 October 2026 to replace the Essential Eight, according to iTnews and techpartner.news. Priority phases set an implementation order, not a rating (iTnews).

practitioner ai au-compliance frameworks

Agentic AI harnesses

ASD’s name for everything around the LLM — tools, memory, permissions. Prompt injection is not a model patch. Control what the harness can reach and do.

practitioner vulnerability frameworks hardening

CISA KEV

Known Exploited Vulnerabilities catalogue plus BOD 26-04 deadlines. If it is on KEV and you are internet-facing, treat exposure as an incident trigger, not a backlog item.

frameworks au-compliance hardening

Essential Eight

ASD's baseline of eight mitigation strategies. Maturity 0 to 3. The work is picking a level you can actually hold.

practitioner au-compliance hardening frameworks

Essential Eight evidence

How to show you actually did the Essential Eight. Scope, artefact, date, owner. Overall maturity is the weakest strategy, not the average.

practitioner au-compliance frameworks cloud

IRAP

Infosec Registered Assessors Program. ASD-endorsed assessors test systems and cloud against the ISM. The report is evidence. Authorisation stays with you.

frameworks

ISO/IEC 27001

A management system standard. The certificate is proof you run the system, not that you are unbreachable.

practitioner frameworks au-compliance acsc-glossary

Information Security Manual (ISM)

ASD's control catalogue for Australian government systems — and the shared dialect for anyone who needs to speak the same language. Applicability, tailoring, and dated exceptions are the work.

detection frameworks

MITRE ATT&CK

A knowledge base of adversary tactics and techniques. Use it to find detection gaps, not to decorate a slide.

frameworks

NIST Cybersecurity Framework

Identify, Protect, Detect, Respond, Recover — plus Govern in 2.0. A common language, not a certification.

practitioner au-compliance frameworks hardening

PSPF Policy 14 — Cyber Security Strategies

PSPF Release 2025 Policy 14 is the Commonwealth cyber floor (Essential Eight to ML2 for NCEs). Direction 002-2026 adds a hard legacy-tech stocktake deadline of 31 March 2027 — and SoGS measures by 31 December 2026.

practitioner ai hardening frameworks

Prompt injection

Instructions and data share one channel. ASD and NCSC: no fully reliable model-level fix. Put the controls in the harness.

practitioner au-compliance frameworks

Protective Security Policy Framework

AGD protective security policy for NCEs. Four domains, PSPF Release 2025 Policy 14 cyber floor, Essential Eight to Maturity Level 2 since July 2022.

practitioner au-compliance frameworks

SOCI Act obligations

Security of Critical Infrastructure Act 2018, mapped for practitioners. Eleven sectors, three positive security obligations, extra duties for Systems of National Significance, the 2024 ERP Act changes, and a protected-information offence that catches responsible entities too.

practitioner frameworks au-compliance hardening

Transitioning from the Essential Eight to ASD Essentials

What iTnews and techpartner.news report about moving from the Essential Eight to ASD Essentials: existing work remains relevant, every strategy maps to at least one principle, but maturity ratings do not automatically convert.

Definitions informed by ASD's ACSC glossary. cyber.gov.au glossary