The Australian Information Security Association has praised the release of the first three chapters of the Australian Signals Directorate’s new Essentials framework, with AISA Board Director Dr Rajiv Shah acknowledging that the modern environment requires guidance that can “adapt to emerging threats.
“The Essential Eight has played an important role in improving Australia’s cybersecurity, but also had limitations on today’s threat environment. This evolution recognises that organisations operate in very different technology environments, and that effective security requires practitioners to make informed decisions about their particular risks,” Dr Shah said in an October 16 statement
“A principles-based approach gives cyber security professionals greater flexibility to identify the most appropriate controls for their organisations, while maintaining a clear focus on the security outcomes they need to achieve.
“It also provides a stronger foundation for conversations with executives and boards about cybersecurity investment. Practitioners can explain the risks they are addressing, the controls they are recommending and the business case for investing in them.”
ASD Technical Director Jayden Cooke outlined the new framework at AISA’s CyberCon Conference in Melbourne this week, explaining the thinking behind the evolution and underscoring why it was important to work with industry.
“Developing guidance that is technically sound, practical for organisations to implement and useful to regulators is a complex undertaking. ASD deserves recognition for the work it has put into consulting with the cybersecurity community and developing a framework that can evolve as technology and threats change,” Dr Shah said.
“The continued involvement of practitioners will be particularly important as organisations begin applying the new framework and identifying opportunities for improvement.
“AISA’s 14,000 members bring extensive practical experience from across the Australian cybersecurity sector. We look forward to putting the framework to use and to providing ASD with constructive feedback as it continues to develop.”
The first three chapters of the new Essentials framework were announced on October 15, covering enterprise IT, operational technology, and cloud environments, providing prioritised guidance for government agencies, critical infrastructure operators, and large organisations.
Want to see more stories from trusted news sources?Make Cyber Daily a preferred news source on Google.
