[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

2 clusters · 5 sources · 4 days · First seen · Last updated

Australian Signals Directorate cybersecurity framework shift

Overview

The Australian Signals Directorate (ASD) has introduced ‘ASD Essentials’, a new cybersecurity framework intended to replace the previous ‘Essential Eight’ model. This new approach moves away from a prescriptive, checklist-based system toward a principles-based, threat-informed strategy designed to address modern complexities such as cloud environments and operational technology.

The initial release of the framework includes foundational chapters for enterprise IT, operational technology (OT), and cloud environments, including SaaS and PaaS, alongside guidance for AI-enabled systems. During the transition, the ASD will maintain both the old and new frameworks on its website.

While the evolution toward effectiveness-based assessment is noted, the Australian Computer Society (ACS) has expressed concerns regarding the lack of standardized qualifications for assessors. ACS CEO Dr. Prins Ralston cautioned that the framework’s reliance on “expert judgement” without defined training standards could lead to inconsistent assessments and provide organizational boards with a “false sense of security”.

Entities

Australian Signals Directorate · Prins Ralston · Australian Computer Society

Timeline

  1. [TECHNOLOGY] 2 sources
    Australian Signals Directorate launches ASD Essentials framework

    The Australian Signals Directorate has released ‘ASD Essentials’, a new cybersecurity framework replacing the Essential Eight to better protect enterprise IT, cloud, and operational technology environments.

  2. [TECHNOLOGY] 3 sources
    Australian Signals Directorate launches ASD Essentials cybersecurity framework

    The Australian Signals Directorate has replaced the Essential Eight with the ASD Essentials framework, moving toward outcome-based security. The ACS warns that a lack of assessor standards could undermine the's

Sources

australiancybersecuritymagazine.com.au · blog.iptel.com.au · govtechreview.com.au · technologydecisions.com.au · thecyberexpress.com