systems in real-time. Partial implementation of . The entity has implemented the All have been fully implemented The entity has fully implemented Safeguarding Reactive approach to emerging majority of the and has with ongoing monitoring of the Essential Eight, and other from cyber cyber intrusions and threats. developed a substantial performance. The entity’s activities relevant to the entity’s threats understanding of emerging cyber procedures and systems are risk environment, to protect intrusions and threats. sufficient to mitigate known cyber against harm from identified intrusions and emerging threats. cyber threats. Processes are regularly tested to ensure response to potential cyber intrusions and emerging threats. Partial security measures are in Security measures are Security measures are applied ICT security measures, including Robust ICT place for ICT system substantially in place for ICT during all stages of ICT system ICT systems certification and systems development. Management of ICT system development. Certification development. ICT systems are accreditation are in accordance systems certification and and accreditation of ICT systems is certified and accredited in with the ISM technical standards. accreditation is ad hoc and in accordance with ISM technical accordance with ISM technical The entity excels in proactively partially implemented in standards in the majority of cases standards when operationalised. exploring opportunities to further accordance with relevant managed when operationalised. improve ICT security protections technical standards when in response to ICT security operationalised. threats.
systems in real-time. Safeguarding from cyber threats Partial implementation of . Reactive approach to emerging cyber intrusions and threats. The entity has implemented the majority of the and has developed a substantial understanding of emerging cyber intrusions and threats. All have been fully implemented with ongoing monitoring of performance. The entity’s procedures and systems are sufficient to mitigate known cyber intrusions and emerging threats. The entity has fully implemented the Essential Eight, and other activities relevant to the entity’s risk environment, to protect against harm from identified cyber threats. Processes are regularly tested to ensure response to potential cyber intrusions and emerging threats. Robust ICT systems Partial security measures are in place for ICT system development. Management of ICT systems certification and accreditation is ad hoc and partially implemented in accordance with relevant technical standards when operationalised. Security measures are substantially in place for ICT system development. Certification and accreditation of ICT systems is in accordance with ISM technical standards in the majority of cases managed when operationalised. Security measures are applied during all stages of ICT system development. ICT systems are certified and accredited in accordance with ISM technical standards when operationalised. ICT security measures, including ICT systems certification and accreditation are in accordance with the ISM technical standards. The entity excels in proactively exploring opportunities to further improve ICT security protections in response to ICT security threats.