Miltary Ai-Teams

Appearance

Using the Information Security Manual ​

Executive summary ​

Purpose ​

Intended audience ​

Authority ​

Cyber security principles ​

Cyber security guidelines ​

Applying a risk-based approach to cyber security ​

Using a risk management framework ​

Define the system ​

Select controls ​

Implement controls ​

Assess controls ​

Authorise the system ​

Monitor the system ​

Further information ​

Executive summary ​

Purpose ​

Intended audience ​

Authority ​

Cyber security principles ​

Cyber security guidelines ​

Purpose ​

Intended audience ​

Authority ​

Cyber security principles ​

Cyber security guidelines ​

Applying a risk-based approach to cyber security ​

Using a risk management framework ​

Define the system ​

Select controls ​

Implement controls ​

Assess controls ​

Authorise the system ​

Monitor the system ​

Further information ​

Using a risk management framework ​

Define the system ​

Select controls ​

Implement controls ​

Assess controls ​

Authorise the system ​

Monitor the system ​

Further information ​

Cyber Security Principles ​

The cyber security principles ​

Govern principles ​

Protect principles ​

Detect principles ​

Respond principles ​

The cyber security principles ​

Govern principles ​

Protect principles ​

Detect principles ​

Respond principles ​

Govern principles ​

Protect principles ​

Detect principles ​

Respond principles ​

Guidelines for Cyber Security Roles ​

Chief Information Security Officer ​

Providing cyber security leadership and guidance ​

Overseeing the cyber security program ​

Coordinating cyber security ​

Reporting on cyber security ​

Overseeing incident response activities ​

Contributing to business continuity and disaster recovery planning ​

Developing a cyber security communications strategy ​

Working with suppliers ​

Receiving and managing a dedicated cyber security budget ​

Overseeing cyber security personnel ​

Overseeing cyber security awareness raising ​

System owners ​

System ownership and oversight ​

Protecting systems and their resources ​

Annual reporting of system security status ​

Chief Information Security Officer ​

Providing cyber security leadership and guidance ​

Overseeing the cyber security program ​

Coordinating cyber security ​

Reporting on cyber security ​

Overseeing incident response activities ​

Contributing to business continuity and disaster recovery planning ​

Developing a cyber security communications strategy ​

Working with suppliers ​

Receiving and managing a dedicated cyber security budget ​

Overseeing cyber security personnel ​

Overseeing cyber security awareness raising ​

Providing cyber security leadership and guidance ​

Overseeing the cyber security program ​

Coordinating cyber security ​

Reporting on cyber security ​

Overseeing incident response activities ​

Contributing to business continuity and disaster recovery planning ​

Developing a cyber security communications strategy ​

Working with suppliers ​

Receiving and managing a dedicated cyber security budget ​

Overseeing cyber security personnel ​

Overseeing cyber security awareness raising ​

System owners ​

System ownership and oversight ​

Protecting systems and their resources ​

Annual reporting of system security status ​

System ownership and oversight ​

Protecting systems and their resources ​

Annual reporting of system security status ​

Guidelines for Cyber Security Incidents ​

Managing cyber security incidents ​

Incident management policy ​

Cyber security incident register ​

Trusted insider program ​

Access to sufficient data sources and tools ​

Reporting cyber security incidents ​

Reporting cyber security incidents to the ACSC ​

Responding to cyber security incidents ​

Enacting incident response plans ​

Handling and containing data spills ​

Handling and containing malicious code infections ​

Handling and containing intrusions ​

Maintaining the integrity of evidence ​

Managing cyber security incidents ​

Incident management policy ​

Cyber security incident register ​

Trusted insider program ​

Access to sufficient data sources and tools ​

Reporting cyber security incidents ​

Reporting cyber security incidents to the ACSC ​

Incident management policy ​

Cyber security incident register ​

Trusted insider program ​

Access to sufficient data sources and tools ​

Reporting cyber security incidents ​

Reporting cyber security incidents to the ACSC ​

Responding to cyber security incidents ​

Enacting incident response plans ​

Handling and containing data spills ​

Handling and containing malicious code infections ​

Handling and containing intrusions ​

Maintaining the integrity of evidence ​

Enacting incident response plans ​

Handling and containing data spills ​

Handling and containing malicious code infections ​

Handling and containing intrusions ​

Maintaining the integrity of evidence ​

Guidelines for Procurement and Outsourcing ​

Cyber supply chain risk management ​

Cyber supply chain risk management activities ​

Supplier relationship management ​

Sourcing applications, ICT equipment and services ​

Delivery of applications, ICT equipment and services ​

Managed services and cloud services ​

Managed services ​

Assessment of managed service providers ​

Outsourced cloud services ​

Assessment of outsourced cloud service providers ​

Contractual security requirements with service providers ​

Access to systems and data by service providers ​

Cyber supply chain risk management ​

Cyber supply chain risk management activities ​

Supplier relationship management ​

Sourcing applications, ICT equipment and services ​

Delivery of applications, ICT equipment and services ​

Cyber supply chain risk management activities ​

Supplier relationship management ​

Sourcing applications, ICT equipment and services ​

Delivery of applications, ICT equipment and services ​

Managed services and cloud services ​

Managed services ​

Assessment of managed service providers ​

Outsourced cloud services ​

Assessment of outsourced cloud service providers ​

Contractual security requirements with service providers ​

Access to systems and data by service providers ​

Managed services ​

Assessment of managed service providers ​

Outsourced cloud services ​

Assessment of outsourced cloud service providers ​

Contractual security requirements with service providers ​

Access to systems and data by service providers ​

Guidelines for Security Documentation ​

Development and maintenance of security documentation ​

Cyber security strategy ​

Approval of security documentation ​

Maintenance of security documentation ​

Communication of security documentation ​

System-specific security documentation ​

System security plan ​

Incident response plan ​

Continuous monitoring plan ​

Security assessment report ​

Plan of action and milestones ​

Development and maintenance of security documentation ​

Cyber security strategy ​

Approval of security documentation ​

Maintenance of security documentation ​

Communication of security documentation ​

Cyber security strategy ​

Approval of security documentation ​

Maintenance of security documentation ​

Communication of security documentation ​

System-specific security documentation ​

System security plan ​

Incident response plan ​

Continuous monitoring plan ​

Security assessment report ​

Plan of action and milestones ​

System security plan ​

Incident response plan ​

Continuous monitoring plan ​

Security assessment report ​

Plan of action and milestones ​

Guidelines for Physical Security ​

Facilities and systems ​

Physical access to systems ​

Physical access to servers, network devices and cryptographic equipment ​

Physical access to network devices in public areas ​

Bringing Radio Frequency and infrared devices into facilities ​

Preventing observation by unauthorised people ​

ICT equipment and media ​

Securing ICT equipment and media ​

Facilities and systems ​

Physical access to systems ​

Physical access to servers, network devices and cryptographic equipment ​

Physical access to network devices in public areas ​

Bringing Radio Frequency and infrared devices into facilities ​

Preventing observation by unauthorised people ​

Physical access to systems ​

Physical access to servers, network devices and cryptographic equipment ​

Physical access to network devices in public areas ​

Bringing Radio Frequency and infrared devices into facilities ​

Preventing observation by unauthorised people ​

ICT equipment and media ​

Securing ICT equipment and media ​

Securing ICT equipment and media ​

Guidelines for Personnel Security ​

Cyber security awareness training ​

Providing cyber security awareness training ​

Managing and reporting suspicious changes to banking details or payment requests ​

Reporting suspicious contact via online services ​

Posting work information to online services ​

Posting personal information to online services ​

Sending and receiving files via online services ​

Access to systems and their resources ​

System access requirements ​

User identification ​

Unprivileged access to systems ​

Unprivileged access to systems by foreign nationals ​

Privileged access to systems ​

Privileged access to systems by foreign nationals ​

Suspension of access to systems ​

Recording authorisation for personnel to access systems ​

Temporary access to systems ​

Emergency access to systems ​

Control of Australian systems ​

Cyber security awareness training ​

Providing cyber security awareness training ​

Managing and reporting suspicious changes to banking details or payment requests ​

Reporting suspicious contact via online services ​

Posting work information to online services ​

Posting personal information to online services ​

Sending and receiving files via online services ​

Providing cyber security awareness training ​

Managing and reporting suspicious changes to banking details or payment requests ​

Reporting suspicious contact via online services ​

Posting work information to online services ​

Posting personal information to online services ​

Sending and receiving files via online services ​

Access to systems and their resources ​

System access requirements ​

User identification ​

Unprivileged access to systems ​

Unprivileged access to systems by foreign nationals ​

Privileged access to systems ​

Privileged access to systems by foreign nationals ​

Suspension of access to systems ​

Recording authorisation for personnel to access systems ​

Temporary access to systems ​

Emergency access to systems ​

Control of Australian systems ​

System access requirements ​

User identification ​

Unprivileged access to systems ​

Unprivileged access to systems by foreign nationals ​

Privileged access to systems ​

Privileged access to systems by foreign nationals ​

Suspension of access to systems ​

Recording authorisation for personnel to access systems ​

Temporary access to systems ​

Emergency access to systems ​

Control of Australian systems ​

Guidelines for Communications Infrastructure ​

Cabling infrastructure ​

Cabling infrastructure standards ​

Use of fibre-optic cables ​

Cable register ​

Floor plan diagrams ​

Cable labelling processes and procedures ​

Labelling cables ​

Labelling building management cables ​

Labelling cables for foreign systems in Australian facilities ​

Cable colours ​

Cable colour non-conformance ​

Cable inspectability ​

Common cable bundles and conduits ​

Common cable reticulation systems ​

Enclosed cable reticulation systems ​

Covers for enclosed cable reticulation systems ​

Sealing cable reticulation systems and conduits ​

Labelling conduits ​

Cables in walls ​

Cables in party walls ​

Wall penetrations ​

Wall outlet boxes ​

Labelling wall outlet boxes ​

Wall outlet box colours ​

Wall outlet box covers ​

Fly lead installation ​

Connecting cable reticulation systems to cabinets ​

Terminating cables in cabinets ​

Terminating cables on patch panels ​

Physical separation of cabinets and patch panels ​

Audio secure rooms ​

Power reticulation ​

Emanation security ​

Emanation security threat assessments in Australia ​

Emanation security threat assessments outside Australia ​

Early consideration of emanation security threats ​

Electromagnetic interference/electromagnetic compatibility standards ​

Cabling infrastructure ​

Cabling infrastructure standards ​

Use of fibre-optic cables ​

Cable register ​

Floor plan diagrams ​

Cable labelling processes and procedures ​

Labelling cables ​

Labelling building management cables ​

Labelling cables for foreign systems in Australian facilities ​

Cable colours ​

Cable colour non-conformance ​

Cable inspectability ​

Common cable bundles and conduits ​

Common cable reticulation systems ​

Enclosed cable reticulation systems ​

Covers for enclosed cable reticulation systems ​

Sealing cable reticulation systems and conduits ​

Labelling conduits ​

Cables in walls ​

Cables in party walls ​

Wall penetrations ​

Wall outlet boxes ​

Labelling wall outlet boxes ​

Wall outlet box colours ​

Wall outlet box covers ​

Fly lead installation ​

Connecting cable reticulation systems to cabinets ​

Terminating cables in cabinets ​

Terminating cables on patch panels ​

Physical separation of cabinets and patch panels ​

Audio secure rooms ​

Power reticulation ​

Cabling infrastructure standards ​

Use of fibre-optic cables ​

Cable register ​

Floor plan diagrams ​

Cable labelling processes and procedures ​

Labelling cables ​

Labelling building management cables ​

Labelling cables for foreign systems in Australian facilities ​

Cable colours ​

Cable colour non-conformance ​

Cable inspectability ​

Common cable bundles and conduits ​

Common cable reticulation systems ​

Enclosed cable reticulation systems ​

Covers for enclosed cable reticulation systems ​

Sealing cable reticulation systems and conduits ​

Labelling conduits ​

Cables in walls ​

Cables in party walls ​

Wall penetrations ​

Wall outlet boxes ​

Labelling wall outlet boxes ​

Wall outlet box colours ​

Wall outlet box covers ​

Fly lead installation ​

Connecting cable reticulation systems to cabinets ​

Terminating cables in cabinets ​

Terminating cables on patch panels ​

Physical separation of cabinets and patch panels ​

Audio secure rooms ​

Power reticulation ​

Emanation security ​

Emanation security threat assessments in Australia ​

Emanation security threat assessments outside Australia ​

Early consideration of emanation security threats ​

Electromagnetic interference/electromagnetic compatibility standards ​

Emanation security threat assessments in Australia ​

Emanation security threat assessments outside Australia ​

Early consideration of emanation security threats ​

Electromagnetic interference/electromagnetic compatibility standards ​

Guidelines for Communications Systems ​

Telephone systems ​

Telephone system usage policy ​

Personnel awareness ​

Protecting conversations ​

Cordless telephone systems ​

Speakerphones ​

Off-hook audio protection ​

Video conferencing and Internet Protocol telephony ​

Video conferencing and Internet Protocol telephony infrastructure hardening ​

Video-aware and voice-aware firewalls and proxies ​

Protecting video conferencing and Internet Protocol telephony traffic ​

Video conferencing unit and Internet Protocol phone authentication ​

Traffic separation ​

Internet Protocol phones in public areas ​

Microphones and webcams ​

Denial of service response plan ​

Fax machines and multifunction devices ​

Fax machine and multifunction device usage policy ​

Sending fax messages ​

Receiving fax messages ​

Connecting multifunction devices to both networks and digital telephone systems ​

Authenticating to multifunction devices ​

Scanning and copying documents on multifunction devices ​

Auditing multifunction device use ​

Observing fax machine and multifunction device use ​

Telephone systems ​

Telephone system usage policy ​

Personnel awareness ​

Protecting conversations ​

Cordless telephone systems ​

Speakerphones ​

Off-hook audio protection ​

Telephone system usage policy ​

Personnel awareness ​

Protecting conversations ​

Cordless telephone systems ​

Speakerphones ​

Off-hook audio protection ​

Video conferencing and Internet Protocol telephony ​

Video conferencing and Internet Protocol telephony infrastructure hardening ​

Video-aware and voice-aware firewalls and proxies ​

Protecting video conferencing and Internet Protocol telephony traffic ​

Video conferencing unit and Internet Protocol phone authentication ​

Traffic separation ​

Internet Protocol phones in public areas ​

Microphones and webcams ​

Denial of service response plan ​

Video conferencing and Internet Protocol telephony infrastructure hardening ​

Video-aware and voice-aware firewalls and proxies ​

Protecting video conferencing and Internet Protocol telephony traffic ​

Video conferencing unit and Internet Protocol phone authentication ​

Traffic separation ​

Internet Protocol phones in public areas ​

Microphones and webcams ​

Denial of service response plan ​

Fax machines and multifunction devices ​

Fax machine and multifunction device usage policy ​

Sending fax messages ​

Receiving fax messages ​

Connecting multifunction devices to both networks and digital telephone systems ​

Authenticating to multifunction devices ​

Scanning and copying documents on multifunction devices ​

Auditing multifunction device use ​

Observing fax machine and multifunction device use ​

Fax machine and multifunction device usage policy ​

Sending fax messages ​

Receiving fax messages ​

Connecting multifunction devices to both networks and digital telephone systems ​

Authenticating to multifunction devices ​

Scanning and copying documents on multifunction devices ​

Auditing multifunction device use ​

Observing fax machine and multifunction device use ​

Guidelines for Enterprise Mobility ​

Mobile device management ​

Mobile device management policy ​

ASD-approved platforms ​

Privately-owned mobile devices ​

Organisation-owned mobile devices ​

Storage encryption ​

Communications encryption ​

Bluetooth functionality ​

Maintaining mobile device security ​

Connecting mobile devices to the internet ​

Mobile device usage ​

Mobile device usage policy ​

Personnel awareness ​

Paging, message services and messaging apps ​

Using mobile devices in public spaces ​

Maintaining control of mobile devices ​

Mobile device emergency sanitisation processes and procedures ​

Before travelling overseas with mobile devices ​

While travelling overseas with mobile devices ​

After travelling overseas with mobile devices ​

Mobile device management ​

Mobile device management policy ​

ASD-approved platforms ​

Privately-owned mobile devices ​

Organisation-owned mobile devices ​

Storage encryption ​

Communications encryption ​

Bluetooth functionality ​

Maintaining mobile device security ​

Connecting mobile devices to the internet ​

Mobile device management policy ​

ASD-approved platforms ​

Privately-owned mobile devices ​

Organisation-owned mobile devices ​

Storage encryption ​

Communications encryption ​

Bluetooth functionality ​

Maintaining mobile device security ​

Connecting mobile devices to the internet ​

Mobile device usage ​

Mobile device usage policy ​

Personnel awareness ​

Paging, message services and messaging apps ​

Using mobile devices in public spaces ​

Maintaining control of mobile devices ​

Mobile device emergency sanitisation processes and procedures ​

Before travelling overseas with mobile devices ​

While travelling overseas with mobile devices ​

After travelling overseas with mobile devices ​

Mobile device usage policy ​

Personnel awareness ​

Paging, message services and messaging apps ​

Using mobile devices in public spaces ​

Maintaining control of mobile devices ​

Mobile device emergency sanitisation processes and procedures ​

Before travelling overseas with mobile devices ​

While travelling overseas with mobile devices ​

After travelling overseas with mobile devices ​

Guidelines for Evaluated Products ​

Evaluated product procurement ​

Evaluated product selection ​

Delivery of evaluated products ​

Evaluated product usage ​

Using evaluated products ​

Evaluated product procurement ​

Evaluated product selection ​

Delivery of evaluated products ​

Evaluated product selection ​

Delivery of evaluated products ​

Evaluated product usage ​

Using evaluated products ​

Using evaluated products ​

Guidelines for ICT Equipment ​

ICT equipment usage ​

ICT equipment management policy ​

ICT equipment selection ​

Hardening ICT equipment configurations ​

ICT equipment register ​

Labelling ICT equipment ​

Labelling high assurance ICT equipment ​

Classifying ICT equipment ​

Handling ICT equipment ​

ICT equipment maintenance and repairs ​

Maintenance and repairs of high assurance ICT equipment ​

On-site maintenance and repairs ​

Off-site maintenance and repairs ​

Inspection of ICT equipment following maintenance and repairs ​

ICT equipment sanitisation and destruction ​

ICT equipment sanitisation processes and procedures ​

ICT equipment destruction processes and procedures ​

Sanitising ICT equipment ​

Sanitising highly sensitive ICT equipment ​

Destroying high assurance ICT equipment ​

Sanitising printers and multifunction devices ​

Sanitising televisions and computer monitors ​

Sanitising network devices ​

Sanitising fax machines ​

ICT equipment disposal ​

ICT equipment disposal processes and procedures ​

Disposal of ICT equipment ​

ICT equipment usage ​

ICT equipment management policy ​

ICT equipment selection ​

Hardening ICT equipment configurations ​

ICT equipment register ​

Labelling ICT equipment ​

Labelling high assurance ICT equipment ​

Classifying ICT equipment ​

Handling ICT equipment ​

ICT equipment management policy ​

ICT equipment selection ​

Hardening ICT equipment configurations ​

ICT equipment register ​

Labelling ICT equipment ​

Labelling high assurance ICT equipment ​

Classifying ICT equipment ​

Handling ICT equipment ​

ICT equipment maintenance and repairs ​

Maintenance and repairs of high assurance ICT equipment ​

On-site maintenance and repairs ​

Off-site maintenance and repairs ​

Inspection of ICT equipment following maintenance and repairs ​

Maintenance and repairs of high assurance ICT equipment ​

On-site maintenance and repairs ​

Off-site maintenance and repairs ​

Inspection of ICT equipment following maintenance and repairs ​

ICT equipment sanitisation and destruction ​

ICT equipment sanitisation processes and procedures ​

ICT equipment destruction processes and procedures ​

Sanitising ICT equipment ​

Sanitising highly sensitive ICT equipment ​

Destroying high assurance ICT equipment ​

Sanitising printers and multifunction devices ​

Sanitising televisions and computer monitors ​

Sanitising network devices ​

Sanitising fax machines ​

ICT equipment sanitisation processes and procedures ​

ICT equipment destruction processes and procedures ​

Sanitising ICT equipment ​

Sanitising highly sensitive ICT equipment ​

Destroying high assurance ICT equipment ​

Sanitising printers and multifunction devices ​

Sanitising televisions and computer monitors ​

Sanitising network devices ​

Sanitising fax machines ​

ICT equipment disposal ​

ICT equipment disposal processes and procedures ​

Disposal of ICT equipment ​

ICT equipment disposal processes and procedures ​

Disposal of ICT equipment ​

Guidelines for Media ​

Media usage ​

Media management policy ​

Removable media usage policy ​

Removable media register ​

Labelling media ​

Classifying media ​

Reclassifying media ​

Handling media ​

Sanitising media before first use ​

Using media for data transfers ​

Media sanitisation ​

Media sanitisation processes and procedures ​

Volatile media sanitisation ​

Treatment of volatile media following sanitisation ​

Non-volatile magnetic media sanitisation ​

Treatment of non-volatile magnetic media following sanitisation ​

Non-volatile erasable programmable read-only memory media sanitisation ​

Non-volatile electrically erasable programmable read-only memory media sanitisation ​

Treatment of non-volatile erasable and electrically erasable programmable read-only memory media following sanitisation ​

Non-volatile flash memory media sanitisation ​

Treatment of non-volatile flash memory media following sanitisation ​

Media that cannot be successfully sanitised ​

Media destruction ​

Media destruction processes and procedures ​

Media that cannot be sanitised ​

Media destruction equipment ​

Media destruction methods ​

Treatment of media waste particles ​

Degaussing magnetic media ​

Supervision of destruction ​

Supervision of accountable material destruction ​

Outsourcing media destruction ​

Media disposal ​

Media disposal processes and procedures ​

Disposal of media ​

Media usage ​

Media management policy ​

Removable media usage policy ​

Removable media register ​

Labelling media ​

Classifying media ​

Reclassifying media ​

Handling media ​

Sanitising media before first use ​

Using media for data transfers ​

Media management policy ​

Removable media usage policy ​

Removable media register ​

Labelling media ​

Classifying media ​

Reclassifying media ​

Handling media ​

Sanitising media before first use ​

Using media for data transfers ​

Media sanitisation ​

Media sanitisation processes and procedures ​

Volatile media sanitisation ​

Treatment of volatile media following sanitisation ​

Non-volatile magnetic media sanitisation ​

Treatment of non-volatile magnetic media following sanitisation ​

Non-volatile erasable programmable read-only memory media sanitisation ​

Non-volatile electrically erasable programmable read-only memory media sanitisation ​

Treatment of non-volatile erasable and electrically erasable programmable read-only memory media following sanitisation ​

Non-volatile flash memory media sanitisation ​

Treatment of non-volatile flash memory media following sanitisation ​

Media that cannot be successfully sanitised ​

Media sanitisation processes and procedures ​

Volatile media sanitisation ​

Treatment of volatile media following sanitisation ​

Non-volatile magnetic media sanitisation ​

Treatment of non-volatile magnetic media following sanitisation ​

Non-volatile erasable programmable read-only memory media sanitisation ​

Non-volatile electrically erasable programmable read-only memory media sanitisation ​

Treatment of non-volatile erasable and electrically erasable programmable read-only memory media following sanitisation ​

Non-volatile flash memory media sanitisation ​

Treatment of non-volatile flash memory media following sanitisation ​

Media that cannot be successfully sanitised ​

Media destruction ​

Media destruction processes and procedures ​

Media that cannot be sanitised ​

Media destruction equipment ​

Media destruction methods ​

Treatment of media waste particles ​

Degaussing magnetic media ​

Supervision of destruction ​

Supervision of accountable material destruction ​

Outsourcing media destruction ​

Media destruction processes and procedures ​

Media that cannot be sanitised ​

Media destruction equipment ​

Media destruction methods ​

Treatment of media waste particles ​

Degaussing magnetic media ​

Supervision of destruction ​

Supervision of accountable material destruction ​

Outsourcing media destruction ​

Media disposal ​

Media disposal processes and procedures ​

Disposal of media ​

Media disposal processes and procedures ​

Disposal of media ​

Guidelines for System Hardening ​

Operating system hardening ​

Operating system selection ​

Operating system releases and versions ​

Standard Operating Environments ​

Hardening operating system configurations ​

Application management ​

Application control ​

PowerShell ​

Host-based Intrusion Prevention System ​

Software firewall ​

Antivirus software ​

Device access control software ​

Operating system event logging ​

User application hardening ​

User application selection ​

User application releases ​

Hardening user application configurations ​

Microsoft Office macros ​

Server application hardening ​

Server application selection ​

Server application releases ​

Hardening server application configurations ​

Restricting privileges for server applications ​

Microsoft Active Directory Domain Services domain controllers ​

Microsoft Active Directory Domain Services account hardening ​

Microsoft Active Directory Domain Services security group memberships ​

Authentication hardening ​

Authenticating to systems ​

Insecure authentication methods ​

Multi-factor authentication ​

Single-factor authentication ​

Setting credentials for user accounts ​

Setting credentials for break glass accounts, local administrator accounts and service accounts ​

Changing credentials ​

Protecting credentials ​

Account lockouts ​

Session termination ​

Session and screen locking ​

Logon banner ​

Virtualisation hardening ​

Functional separation between computing environments ​

Operating system hardening ​

Operating system selection ​

Operating system releases and versions ​

Standard Operating Environments ​

Hardening operating system configurations ​

Application management ​

Application control ​

PowerShell ​

Host-based Intrusion Prevention System ​

Software firewall ​

Antivirus software ​

Device access control software ​

Operating system event logging ​

Operating system selection ​

Operating system releases and versions ​

Standard Operating Environments ​

Hardening operating system configurations ​

Application management ​

Application control ​

PowerShell ​

Host-based Intrusion Prevention System ​

Software firewall ​

Antivirus software ​

Device access control software ​

Operating system event logging ​

User application hardening ​

User application selection ​

User application releases ​

Hardening user application configurations ​

Microsoft Office macros ​

User application selection ​

User application releases ​

Hardening user application configurations ​

Microsoft Office macros ​

Server application hardening ​

Server application selection ​

Server application releases ​

Hardening server application configurations ​

Restricting privileges for server applications ​

Microsoft Active Directory Domain Services domain controllers ​

Microsoft Active Directory Domain Services account hardening ​

Microsoft Active Directory Domain Services security group memberships ​

Server application selection ​

Server application releases ​

Hardening server application configurations ​

Restricting privileges for server applications ​

Microsoft Active Directory Domain Services domain controllers ​

Microsoft Active Directory Domain Services account hardening ​

Microsoft Active Directory Domain Services security group memberships ​

Authentication hardening ​

Authenticating to systems ​

Insecure authentication methods ​

Multi-factor authentication ​

Single-factor authentication ​

Setting credentials for user accounts ​

Setting credentials for break glass accounts, local administrator accounts and service accounts ​

Changing credentials ​

Protecting credentials ​

Account lockouts ​

Session termination ​

Session and screen locking ​

Logon banner ​

Authenticating to systems ​

Insecure authentication methods ​

Multi-factor authentication ​

Single-factor authentication ​

Setting credentials for user accounts ​

Setting credentials for break glass accounts, local administrator accounts and service accounts ​

Changing credentials ​

Protecting credentials ​

Account lockouts ​

Session termination ​

Session and screen locking ​

Logon banner ​

Virtualisation hardening ​

Functional separation between computing environments ​

Functional separation between computing environments ​

Guidelines for System Management ​

System administration ​

System administration processes and procedures ​

Separate privileged operating environments ​

Administrative infrastructure ​

System patching ​

Patch management processes and procedures ​

Software register ​

Scanning for missing patches or updates ​

When to patch security vulnerabilities ​

Cessation of support ​

Data backup and restoration ​

Digital preservation policy ​

Data backup and restoration processes and procedures ​

Performing and retaining backups ​

Backup access ​

Backup modification and deletion ​

Testing restoration of backups ​

System administration ​

System administration processes and procedures ​

Separate privileged operating environments ​

Administrative infrastructure ​

System administration processes and procedures ​

Separate privileged operating environments ​

Administrative infrastructure ​

System patching ​

Patch management processes and procedures ​

Software register ​

Scanning for missing patches or updates ​

When to patch security vulnerabilities ​

Cessation of support ​

Patch management processes and procedures ​

Software register ​

Scanning for missing patches or updates ​

When to patch security vulnerabilities ​

Cessation of support ​

Data backup and restoration ​

Digital preservation policy ​

Data backup and restoration processes and procedures ​

Performing and retaining backups ​

Backup access ​

Backup modification and deletion ​

Testing restoration of backups ​

Digital preservation policy ​

Data backup and restoration processes and procedures ​

Performing and retaining backups ​

Backup access ​

Backup modification and deletion ​

Testing restoration of backups ​

Guidelines for System Monitoring ​

Event logging and monitoring ​

Event logging policy ​

Event log details ​

Centralised event logging facility ​

Event log monitoring ​

Event log retention ​

Event logging and monitoring ​

Event logging policy ​

Event log details ​

Centralised event logging facility ​

Event log monitoring ​

Event log retention ​

Event logging policy ​

Event log details ​

Centralised event logging facility ​

Event log monitoring ​

Event log retention ​

Guidelines for Software Development ​

Application development ​

Development, testing and production environments ​

Secure software design and development ​

Software bill of materials ​

Application security testing ​

Vulnerability disclosure program ​

Web application development ​

Open Web Application Security Projects ​

Web application frameworks ​

Web application interactions ​

Web application programming interfaces ​

Web application input handling ​

Web application output encoding ​

Web browser-based controls ​

Web application firewalls ​

Web application event logging ​

Application development ​

Development, testing and production environments ​

Secure software design and development ​

Software bill of materials ​

Application security testing ​

Vulnerability disclosure program ​

Development, testing and production environments ​

Secure software design and development ​

Software bill of materials ​

Application security testing ​

Vulnerability disclosure program ​

Web application development ​

Open Web Application Security Projects ​

Web application frameworks ​

Web application interactions ​

Web application programming interfaces ​

Web application input handling ​

Web application output encoding ​

Web browser-based controls ​

Web application firewalls ​

Web application event logging ​

Open Web Application Security Projects ​

Web application frameworks ​

Web application interactions ​

Web application programming interfaces ​

Web application input handling ​

Web application output encoding ​

Web browser-based controls ​

Web application firewalls ​

Web application event logging ​

Guidelines for Database Systems ​

Database servers ​

Functional separation between database servers and web servers ​

Communications between database servers and web servers ​

Network environment ​

Separation of development, testing and production database servers ​

Databases ​

Database register ​

Protecting databases ​

Protecting database contents ​

Separation of development, testing and production databases ​

Web application interaction with databases ​

Database event logging ​

Database servers ​

Functional separation between database servers and web servers ​

Communications between database servers and web servers ​

Network environment ​

Separation of development, testing and production database servers ​

Functional separation between database servers and web servers ​

Communications between database servers and web servers ​

Network environment ​

Separation of development, testing and production database servers ​

Databases ​

Database register ​

Protecting databases ​

Protecting database contents ​

Separation of development, testing and production databases ​

Web application interaction with databases ​

Database event logging ​

Database register ​

Protecting databases ​

Protecting database contents ​

Separation of development, testing and production databases ​

Web application interaction with databases ​

Database event logging ​

Guidelines for Email ​

Email usage ​

Email usage policy ​

Webmail services ​

Protective markings for emails ​

Protective marking tools ​

Handling emails with inappropriate, invalid or missing protective markings ​

Email distribution lists ​

Email gateways and servers ​

Centralised email gateways ​

Email gateway maintenance activities ​

Open relay email servers ​

Email server transport encryption ​

Sender Policy Framework ​

DomainKeys Identified Mail ​

Domain-based Message Authentication, Reporting and Conformance ​

Email content filtering ​

Blocking suspicious emails ​

Notifications of undeliverable emails ​

Email usage ​

Email usage policy ​

Webmail services ​

Protective markings for emails ​

Protective marking tools ​

Handling emails with inappropriate, invalid or missing protective markings ​

Email distribution lists ​

Email usage policy ​

Webmail services ​

Protective markings for emails ​

Protective marking tools ​

Handling emails with inappropriate, invalid or missing protective markings ​

Email distribution lists ​

Email gateways and servers ​

Centralised email gateways ​

Email gateway maintenance activities ​

Open relay email servers ​

Email server transport encryption ​

Sender Policy Framework ​

DomainKeys Identified Mail ​

Domain-based Message Authentication, Reporting and Conformance ​

Email content filtering ​

Blocking suspicious emails ​

Notifications of undeliverable emails ​

Centralised email gateways ​

Email gateway maintenance activities ​

Open relay email servers ​

Email server transport encryption ​

Sender Policy Framework ​

DomainKeys Identified Mail ​

Domain-based Message Authentication, Reporting and Conformance ​

Email content filtering ​

Blocking suspicious emails ​

Notifications of undeliverable emails ​

Guidelines for Networking ​

Network design and configuration ​

Network documentation ​

Network encryption ​

Network segmentation and segregation ​

Using Virtual Local Area Networks ​

Using Internet Protocol version 6 ​

Network access controls ​

Functional separation between servers ​

Networked management interfaces ​

Network management traffic ​

Use of Simple Network Management Protocol ​

Using Network-based Intrusion Detection and Prevention Systems ​

Blocking anonymity network traffic ​

Protective Domain Name System Services ​

Flashing network devices with trusted firmware before first use ​

Default accounts and credentials for network devices ​

Disabling unused physical ports on network devices ​

Regularly restarting network devices ​

Wireless networks ​

Choosing wireless devices ​

Public wireless networks ​

Administrative interfaces for wireless access points ​

Default settings ​

Media Access Control address filtering ​

Static addressing ​

Confidentiality and integrity of wireless network traffic ​

802.1X authentication ​

Evaluation of 802.1X authentication implementation ​

Generating and issuing certificates for authentication ​

Caching 802.1X authentication outcomes ​

Fast Basic Service Set Transition ​

Remote Authentication Dial-In User Service authentication ​

Interference between wireless networks ​

Protecting management frames on wireless networks ​

Wireless network footprint ​

Service continuity for online services ​

Cloud-based hosting of online services ​

Capacity and availability planning and monitoring for online services ​

Using content delivery networks ​

Denial-of-service attack mitigation strategies ​

Network design and configuration ​

Network documentation ​

Network encryption ​

Network segmentation and segregation ​

Using Virtual Local Area Networks ​

Using Internet Protocol version 6 ​

Network access controls ​

Functional separation between servers ​

Networked management interfaces ​

Network management traffic ​

Use of Simple Network Management Protocol ​

Using Network-based Intrusion Detection and Prevention Systems ​

Blocking anonymity network traffic ​

Protective Domain Name System Services ​

Flashing network devices with trusted firmware before first use ​

Default accounts and credentials for network devices ​

Disabling unused physical ports on network devices ​

Regularly restarting network devices ​

Network documentation ​

Network encryption ​

Network segmentation and segregation ​

Using Virtual Local Area Networks ​

Using Internet Protocol version 6 ​

Network access controls ​

Functional separation between servers ​

Networked management interfaces ​

Network management traffic ​

Use of Simple Network Management Protocol ​

Using Network-based Intrusion Detection and Prevention Systems ​

Blocking anonymity network traffic ​

Protective Domain Name System Services ​

Flashing network devices with trusted firmware before first use ​

Default accounts and credentials for network devices ​

Disabling unused physical ports on network devices ​

Regularly restarting network devices ​

Wireless networks ​

Choosing wireless devices ​

Public wireless networks ​

Administrative interfaces for wireless access points ​

Default settings ​

Media Access Control address filtering ​

Static addressing ​

Confidentiality and integrity of wireless network traffic ​

802.1X authentication ​

Evaluation of 802.1X authentication implementation ​

Generating and issuing certificates for authentication ​

Caching 802.1X authentication outcomes ​

Fast Basic Service Set Transition ​

Remote Authentication Dial-In User Service authentication ​

Interference between wireless networks ​

Protecting management frames on wireless networks ​

Wireless network footprint ​

Choosing wireless devices ​

Public wireless networks ​

Administrative interfaces for wireless access points ​

Default settings ​

Media Access Control address filtering ​

Static addressing ​

Confidentiality and integrity of wireless network traffic ​

802.1X authentication ​

Evaluation of 802.1X authentication implementation ​

Generating and issuing certificates for authentication ​

Caching 802.1X authentication outcomes ​

Fast Basic Service Set Transition ​

Remote Authentication Dial-In User Service authentication ​

Interference between wireless networks ​

Protecting management frames on wireless networks ​

Wireless network footprint ​

Service continuity for online services ​

Cloud-based hosting of online services ​

Capacity and availability planning and monitoring for online services ​

Using content delivery networks ​

Denial-of-service attack mitigation strategies ​

Cloud-based hosting of online services ​

Capacity and availability planning and monitoring for online services ​

Using content delivery networks ​

Denial-of-service attack mitigation strategies ​

Guidelines for Cryptography ​

Cryptographic fundamentals ​

ASD-approved High Assurance Cryptographic Equipment ​

Cryptographic key management processes and procedures ​

Encrypting data at rest ​

Encrypting data in transit ​

Data recovery ​

Handling encrypted ICT equipment and media ​

Transporting cryptographic equipment ​

ASD-Approved Cryptographic Algorithms ​

Using ASD-Approved Cryptographic Algorithms ​

Asymmetric/public key algorithms ​

Using Diffie-Hellman ​

Using the Digital Signature Algorithm ​

Using Elliptic Curve Cryptography ​

Using Elliptic Curve Diffie-Hellman ​

Using the Elliptic Curve Digital Signature Algorithm ​

Using Rivest-Shamir-Adleman ​

Using hashing algorithms ​

Using symmetric encryption algorithms ​

ASD-Approved Cryptographic Protocols ​

Using ASD-Approved Cryptographic Protocols ​

Transport Layer Security ​

Configuring Transport Layer Security ​

Secure Shell ​

Configuring Secure Shell ​

Authentication mechanisms ​

Automated remote access ​

SSH-agent ​

Secure/Multipurpose Internet Mail Extension ​

Configuring Secure/Multipurpose Internet Mail Extension ​

Internet Protocol Security ​

Mode of operation ​

Protocol selection ​

Key exchange ​

Encryption algorithms ​

Pseudorandom function algorithms ​

Integrity algorithms ​

Diffie-Hellman groups ​

Security association lifetimes ​

Perfect Forward Secrecy ​

Cryptographic fundamentals ​

ASD-approved High Assurance Cryptographic Equipment ​

Cryptographic key management processes and procedures ​

Encrypting data at rest ​

Encrypting data in transit ​

Data recovery ​

Handling encrypted ICT equipment and media ​

Transporting cryptographic equipment ​

ASD-approved High Assurance Cryptographic Equipment ​

Cryptographic key management processes and procedures ​

Encrypting data at rest ​

Encrypting data in transit ​

Data recovery ​

Handling encrypted ICT equipment and media ​

Transporting cryptographic equipment ​

ASD-Approved Cryptographic Algorithms ​

Using ASD-Approved Cryptographic Algorithms ​

Asymmetric/public key algorithms ​

Using Diffie-Hellman ​

Using the Digital Signature Algorithm ​

Using Elliptic Curve Cryptography ​

Using Elliptic Curve Diffie-Hellman ​

Using the Elliptic Curve Digital Signature Algorithm ​

Using Rivest-Shamir-Adleman ​

Using hashing algorithms ​

Using symmetric encryption algorithms ​

Using ASD-Approved Cryptographic Algorithms ​

Asymmetric/public key algorithms ​

Using Diffie-Hellman ​

Using the Digital Signature Algorithm ​

Using Elliptic Curve Cryptography ​

Using Elliptic Curve Diffie-Hellman ​

Using the Elliptic Curve Digital Signature Algorithm ​

Using Rivest-Shamir-Adleman ​

Using hashing algorithms ​

Using symmetric encryption algorithms ​

ASD-Approved Cryptographic Protocols ​

Using ASD-Approved Cryptographic Protocols ​

Using ASD-Approved Cryptographic Protocols ​

Transport Layer Security ​

Configuring Transport Layer Security ​

Configuring Transport Layer Security ​

Secure Shell ​

Configuring Secure Shell ​

Authentication mechanisms ​

Automated remote access ​

SSH-agent ​

Configuring Secure Shell ​

Authentication mechanisms ​

Automated remote access ​

SSH-agent ​

Secure/Multipurpose Internet Mail Extension ​

Configuring Secure/Multipurpose Internet Mail Extension ​

Configuring Secure/Multipurpose Internet Mail Extension ​

Internet Protocol Security ​

Mode of operation ​

Protocol selection ​

Key exchange ​

Encryption algorithms ​

Pseudorandom function algorithms ​

Integrity algorithms ​

Diffie-Hellman groups ​

Security association lifetimes ​

Perfect Forward Secrecy ​

Mode of operation ​

Protocol selection ​

Key exchange ​

Encryption algorithms ​

Pseudorandom function algorithms ​

Integrity algorithms ​

Diffie-Hellman groups ​

Security association lifetimes ​

Perfect Forward Secrecy ​

Guidelines for Gateways ​

Gateways ​

Implementing gateways ​

System administrators for gateways ​

System administration of gateways ​

Authenticating to networks accessed via gateways ​

Border Gateway Protocol route security ​

Gateway event logging and alerting ​

Assessment of gateways ​

Cross Domain Solutions ​

Implementing Cross Domain Solutions ​

Consultation on Cross Domain Solutions ​

Separation of data flows ​

Cross Domain Solution event logging ​

User training ​

Firewalls ​

Using firewalls ​

Diodes ​

Using diodes ​

Web proxies ​

Web usage policy ​

Using web proxies ​

Web proxy event logging ​

Web content filters ​

Using web content filters ​

Transport Layer Security filtering ​

Allowing and blocking access to domain names ​

Content filtering ​

Performing content filtering ​

Encrypted files ​

Archive files ​

Antivirus scanning ​

Automated dynamic analysis ​

Allowing specific content types ​

Content validation ​

Content conversion ​

Content sanitisation ​

Validating file integrity ​

Peripheral switches ​

Using peripheral switches ​

Gateways ​

Implementing gateways ​

System administrators for gateways ​

System administration of gateways ​

Authenticating to networks accessed via gateways ​

Border Gateway Protocol route security ​

Gateway event logging and alerting ​

Assessment of gateways ​

Implementing gateways ​

System administrators for gateways ​

System administration of gateways ​

Authenticating to networks accessed via gateways ​

Border Gateway Protocol route security ​

Gateway event logging and alerting ​

Assessment of gateways ​

Cross Domain Solutions ​

Implementing Cross Domain Solutions ​

Consultation on Cross Domain Solutions ​

Separation of data flows ​

Cross Domain Solution event logging ​

User training ​

Implementing Cross Domain Solutions ​

Consultation on Cross Domain Solutions ​

Separation of data flows ​

Cross Domain Solution event logging ​

User training ​

Firewalls ​

Using firewalls ​

Using firewalls ​

Diodes ​

Using diodes ​

Using diodes ​

Web proxies ​

Web usage policy ​

Using web proxies ​

Web proxy event logging ​

Web usage policy ​

Using web proxies ​

Web proxy event logging ​

Web content filters ​

Using web content filters ​

Transport Layer Security filtering ​

Allowing and blocking access to domain names ​

Using web content filters ​

Transport Layer Security filtering ​

Allowing and blocking access to domain names ​

Content filtering ​

Performing content filtering ​

Encrypted files ​

Archive files ​

Antivirus scanning ​

Automated dynamic analysis ​

Allowing specific content types ​

Content validation ​

Content conversion ​

Content sanitisation ​

Validating file integrity ​

Performing content filtering ​

Encrypted files ​

Archive files ​

Antivirus scanning ​

Automated dynamic analysis ​

Allowing specific content types ​

Content validation ​

Content conversion ​

Content sanitisation ​

Validating file integrity ​

Peripheral switches ​

Using peripheral switches ​

Using peripheral switches ​

Guidelines for Data Transfers ​

Data transfers ​

Data transfer processes and procedures ​

User responsibilities ​

Manual import of data ​

Authorising export of data ​

Manual export of data ​

Monitoring data import and export ​

Data transfers ​

Data transfer processes and procedures ​

User responsibilities ​

Manual import of data ​

Authorising export of data ​

Manual export of data ​

Monitoring data import and export ​

Data transfer processes and procedures ​

User responsibilities ​

Manual import of data ​

Authorising export of data ​

Manual export of data ​

Monitoring data import and export ​

Cyber Security Terminology ​

Glossary of abbreviations ​

Glossary of cyber security terms ​

Glossary of abbreviations ​

Glossary of cyber security terms ​